mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
add h0neytr4p honeypot
This commit is contained in:
14
docker/elk/logstash/dist/logstash.conf
vendored
14
docker/elk/logstash/dist/logstash.conf
vendored
@ -120,6 +120,13 @@ input {
|
||||
type => "Go-pot"
|
||||
}
|
||||
|
||||
# H0neytr4p
|
||||
file {
|
||||
path => ["/data/h0neytr4p/log/log.json"]
|
||||
codec => json
|
||||
type => "H0neytr4p"
|
||||
}
|
||||
|
||||
# Hellpot
|
||||
file {
|
||||
path => ["/data/hellpot/log/hellpot.log"]
|
||||
@ -536,6 +543,13 @@ filter {
|
||||
}
|
||||
}
|
||||
|
||||
# H0neytr4p
|
||||
if [type] == "H0neytr4p" {
|
||||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
}
|
||||
}
|
||||
|
||||
# Heralding
|
||||
if [type] == "Heralding" {
|
||||
csv {
|
||||
|
Reference in New Issue
Block a user