Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-20 06:02:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

go-pot:

Browse source 
- remove conflicting field ("type")
- ranme duration => session_duration
This commit is contained in:
t3chn0m4g3 2024-12-09 19:44:15 +01:00
parent c710aa83f0
commit 663b509e90
3 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
docker/elk/logstash/dist/http_output.conf vendored
View file

@ -520,6 +520,9 @@ filter {
} }
mutate { mutate {
remove_field => ["ts"] remove_field => ["ts"]
rename => {
"duration" => "session_duration"
}
} }
} }

3
docker/elk/logstash/dist/logstash.conf vendored
View file

@ -512,6 +512,9 @@ filter {
} }
mutate { mutate {
remove_field => ["ts"] remove_field => ["ts"]
rename => {
"duration" => "session_duration"
}
} }
} }

2
docker/go-pot/dist/config.yml vendored
View file

@ -56,7 +56,7 @@ server:
# - device_brand: The type of device of the client (Inferred from the user agent) # - device_brand: The type of device of the client (Inferred from the user agent)
# - phase: "start" or "end" depending on the phase of the request # - phase: "start" or "end" depending on the phase of the request
# - duration: The duration of the request in milliseconds (Only available as a part of the end phase of a request) # - duration: The duration of the request in milliseconds (Only available as a part of the end phase of a request)
fields_to_log: "timestamp,id,status,src_ip,method,path,qs,dest_port,type,host,user_agent,browser,browser_version,os,os_version,device,device_brand,phase,duration" fields_to_log: "timestamp,id,status,src_ip,method,path,qs,dest_port,host,user_agent,browser,browser_version,os,os_version,device,device_brand,phase,duration"
# Configuration for logging related settings for go-pot # Configuration for logging related settings for go-pot
logging: logging: