Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 21:12:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix data fields with regard to the request field, log4pot, nginx

Browse source
This commit is contained in:
t3chn0m4g3 2022-01-17 14:50:50 +00:00
parent 2226780086
commit 68d6aa4180
2 changed files with 33 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
docker/elk/logstash/dist/http_output.conf vendored
View file

@ -578,6 +578,7 @@ filter {
} }
mutate { mutate {
rename => { rename => {
"request" => "request_uri"
"server_port" => "dest_port" "server_port" => "dest_port"
"port" => "src_port" "port" => "src_port"
"client" => "src_ip" "client" => "src_ip"
@ -644,6 +645,11 @@ filter {
date { date {
match => [ "timestamp", "ISO8601" ] match => [ "timestamp", "ISO8601" ]
} }
mutate {
rename => {
"request" => "request_data"
}
}
} }
# Tanner # Tanner

6
docker/elk/logstash/dist/logstash.conf vendored
View file

@ -578,6 +578,7 @@ filter {
} }
mutate { mutate {
rename => { rename => {
"request" => "request_uri"
"server_port" => "dest_port" "server_port" => "dest_port"
"port" => "src_port" "port" => "src_port"
"client" => "src_ip" "client" => "src_ip"
@ -644,6 +645,11 @@ filter {
date { date {
match => [ "timestamp", "ISO8601" ] match => [ "timestamp", "ISO8601" ]
} }
mutate {
rename => {
"request" => "request_data"
}
}
} }
# Tanner # Tanner