Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-05-12 19:28:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions1

bump elastic stack to 8.4.3

Browse source
This commit is contained in:
t3chn0m4g3 2022-11-02 16:37:01 +00:00
parent 3b2e8a4c70
commit 2641d1e743
5 changed files with 11 additions and 11 deletions
docker/elk
elasticsearch
Dockerfile
kibana
Dockerfile
logstash
Dockerfile
dist
http_output.conflogstash.conf

2
docker/elk/elasticsearch/Dockerfile
View file

@ -1,7 +1,7 @@
FROM ubuntu:22.04
#
# VARS
ENV ES_VER=8.3.3
ENV ES_VER=8.4.3
#
# Include dist
COPY dist/ /root/dist/

2
docker/elk/kibana/Dockerfile
View file

@ -1,7 +1,7 @@
FROM ubuntu:22.04
#
# VARS
ENV KB_VER=8.3.3
ENV KB_VER=8.4.3
# Include dist
COPY dist/ /root/dist/
#

2
docker/elk/logstash/Dockerfile
View file

@ -1,7 +1,7 @@
FROM ubuntu:22.04
#
# VARS
ENV LS_VER=8.3.3
ENV LS_VER=8.4.3
# Include dist
COPY dist/ /root/dist/
#

8
docker/elk/logstash/dist/http_output.conf vendored
View file

@ -638,12 +638,12 @@ if "_jsonparsefailure" in [tags] { drop {} }
geoip {
cache_size => 10000
source => "src_ip"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
}
geoip {
cache_size => 10000
source => "src_ip"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
}
translate {
refresh_interval => 86400
@ -657,13 +657,13 @@ if "_jsonparsefailure" in [tags] { drop {} }
cache_size => 10000
source => "t-pot_ip_ext"
target => "geoip_ext"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
}
geoip {
cache_size => 10000
source => "t-pot_ip_ext"
target => "geoip_ext"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
}
}

8
docker/elk/logstash/dist/logstash.conf vendored
View file

@ -638,12 +638,12 @@ if "_jsonparsefailure" in [tags] { drop {} }
geoip {
cache_size => 10000
source => "src_ip"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
}
geoip {
cache_size => 10000
source => "src_ip"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
}
translate {
refresh_interval => 86400
@ -657,13 +657,13 @@ if "_jsonparsefailure" in [tags] { drop {} }
cache_size => 10000
source => "t-pot_ip_ext"
target => "geoip_ext"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-City.mmdb"
}
geoip {
cache_size => 10000
source => "t-pot_ip_ext"
target => "geoip_ext"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/logstash-filter-geoip-7.2.12-java/vendor/GeoLite2-ASN.mmdb"
}
}