mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-01 17:17:28 -04:00
fix data fields with regard to the request field, log4pot, nginx
This commit is contained in:
6
docker/elk/logstash/dist/http_output.conf
vendored
6
docker/elk/logstash/dist/http_output.conf
vendored
@ -578,6 +578,7 @@ filter {
|
||||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_uri"
|
||||
"server_port" => "dest_port"
|
||||
"port" => "src_port"
|
||||
"client" => "src_ip"
|
||||
@ -644,6 +645,11 @@ filter {
|
||||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_data"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Tanner
|
||||
|
6
docker/elk/logstash/dist/logstash.conf
vendored
6
docker/elk/logstash/dist/logstash.conf
vendored
@ -578,6 +578,7 @@ filter {
|
||||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_uri"
|
||||
"server_port" => "dest_port"
|
||||
"port" => "src_port"
|
||||
"client" => "src_ip"
|
||||
@ -644,6 +645,11 @@ filter {
|
||||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_data"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Tanner
|
||||
|
Reference in New Issue
Block a user