diff --git a/docker/elk/elasticsearch/Dockerfile b/docker/elk/elasticsearch/Dockerfile index 39c13409..2f14a7b7 100644 --- a/docker/elk/elasticsearch/Dockerfile +++ b/docker/elk/elasticsearch/Dockerfile @@ -13,8 +13,8 @@ RUN apk -U --no-cache add \ # Get and install packages cd /root/dist/ && \ mkdir -p /usr/share/elasticsearch/ && \ - wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.3.2.tar.gz && \ - tar xvfz elasticsearch-6.3.2.tar.gz --strip-components=1 -C /usr/share/elasticsearch/ && \ + wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-6.4.0.tar.gz && \ + tar xvfz elasticsearch-6.4.0.tar.gz --strip-components=1 -C /usr/share/elasticsearch/ && \ # Add and move files cd /root/dist/ && \ @@ -25,7 +25,7 @@ RUN apk -U --no-cache add \ addgroup -g 2000 elasticsearch && \ adduser -S -H -s /bin/ash -u 2000 -D -g 2000 elasticsearch && \ chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/ && \ - rm -rf /usr/share/elasticsearch/modules/x-pack/x-pack-ml && \ + rm -rf /usr/share/elasticsearch/modules/x-pack-ml && \ # Clean up apk del --purge wget && \ diff --git a/docker/elk/kibana/Dockerfile b/docker/elk/kibana/Dockerfile index 64361050..44097e7d 100644 --- a/docker/elk/kibana/Dockerfile +++ b/docker/elk/kibana/Dockerfile @@ -12,8 +12,8 @@ RUN apk -U --no-cache add \ # Get and install packages cd /root/dist/ && \ mkdir -p /usr/share/kibana/ && \ - wget https://artifacts.elastic.co/downloads/kibana/kibana-6.3.2-linux-x86_64.tar.gz && \ - tar xvfz kibana-6.3.2-linux-x86_64.tar.gz --strip-components=1 -C /usr/share/kibana/ && \ + wget https://artifacts.elastic.co/downloads/kibana/kibana-6.4.0-linux-x86_64.tar.gz && \ + tar xvfz kibana-6.4.0-linux-x86_64.tar.gz --strip-components=1 -C /usr/share/kibana/ && \ # Kibana's bundled node does not work in alpine rm /usr/share/kibana/node/bin/node && \ diff --git a/docker/elk/logstash/Dockerfile b/docker/elk/logstash/Dockerfile index a2133f65..faa01213 100644 --- a/docker/elk/logstash/Dockerfile +++ b/docker/elk/logstash/Dockerfile @@ -17,9 +17,9 @@ RUN apk -U --no-cache add \ git clone --depth=1 https://github.com/dtag-dev-sec/listbot /etc/listbot && \ cd /root/dist/ && \ mkdir -p /usr/share/logstash/ && \ - wget https://artifacts.elastic.co/downloads/logstash/logstash-6.3.2.tar.gz && \ + wget https://artifacts.elastic.co/downloads/logstash/logstash-6.4.0.tar.gz && \ wget http://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN.tar.gz && \ - tar xvfz logstash-6.3.2.tar.gz --strip-components=1 -C /usr/share/logstash/ && \ + tar xvfz logstash-6.4.0.tar.gz --strip-components=1 -C /usr/share/logstash/ && \ /usr/share/logstash/bin/logstash-plugin install logstash-filter-translate && \ /usr/share/logstash/bin/logstash-plugin install logstash-output-syslog && \ tar xvfz GeoLite2-ASN.tar.gz --strip-components=1 -C /usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/ && \ diff --git a/docker/elk/logstash/dist/logstash.conf b/docker/elk/logstash/dist/logstash.conf index dd3e05b5..ae4ba80e 100644 --- a/docker/elk/logstash/dist/logstash.conf +++ b/docker/elk/logstash/dist/logstash.conf @@ -394,7 +394,7 @@ if "_grokparsefailure" in [tags] { drop {} } output { elasticsearch { hosts => ["elasticsearch:9200"] - document_type => "doc" +# document_type => "doc" } if [type] == "Suricata" {