telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix data fields with regard to the request field, log4pot, nginx

Browse Source
This commit is contained in:
Marco Ochse
2022-01-17 17:10:48 +01:00
parent ed79b72869
commit cac7cdcec6
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docker/elk/logstash/dist/http_output.conf vendored
View File

@ -578,6 +578,7 @@ filter {
} }
mutate { mutate {
rename => { rename => {
"request" => "request_uri"
"server_port" => "dest_port" "server_port" => "dest_port"
"port" => "src_port" "port" => "src_port"
"client" => "src_ip" "client" => "src_ip"
@ -644,6 +645,11 @@ filter {
date { date {
match => [ "timestamp", "ISO8601" ] match => [ "timestamp", "ISO8601" ]
} }
mutate {
rename => {
"request" => "request_data"
}
}
} }
# Tanner # Tanner

6
docker/elk/logstash/dist/logstash.conf vendored
View File

@ -578,6 +578,7 @@ filter {
} }
mutate { mutate {
rename => { rename => {
"request" => "request_uri"
"server_port" => "dest_port" "server_port" => "dest_port"
"port" => "src_port" "port" => "src_port"
"client" => "src_ip" "client" => "src_ip"
@ -644,6 +645,11 @@ filter {
date { date {
match => [ "timestamp", "ISO8601" ] match => [ "timestamp", "ISO8601" ]
} }
mutate {
rename => {
"request" => "request_data"
}
}
} }
# Tanner # Tanner