start integrating new honeypots into ELK

This commit is contained in:
t3chn0m4g3 2021-10-27 16:14:52 +00:00
parent 348a5d572b
commit 1a844d13ba

View file

@ -517,6 +517,15 @@ filter {
}
}
# Redishoneypot
if [type] == "Redishoneypot" {
date {
match => [ "time", "yyyy-MM-dd HH:mm:ss" ]
remove_field => ["time"]
remove_field => ["timestamp"]
}
}
# NGINX
if [type] == "NGINX" {
date {