mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 04:52:11 +00:00
fix data fields with regard to the request field, log4pot, nginx
This commit is contained in:
parent
2226780086
commit
68d6aa4180
2 changed files with 33 additions and 21 deletions
6
docker/elk/logstash/dist/http_output.conf
vendored
6
docker/elk/logstash/dist/http_output.conf
vendored
|
@ -578,6 +578,7 @@ filter {
|
|||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_uri"
|
||||
"server_port" => "dest_port"
|
||||
"port" => "src_port"
|
||||
"client" => "src_ip"
|
||||
|
@ -644,6 +645,11 @@ filter {
|
|||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_data"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Tanner
|
||||
|
|
6
docker/elk/logstash/dist/logstash.conf
vendored
6
docker/elk/logstash/dist/logstash.conf
vendored
|
@ -578,6 +578,7 @@ filter {
|
|||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_uri"
|
||||
"server_port" => "dest_port"
|
||||
"port" => "src_port"
|
||||
"client" => "src_ip"
|
||||
|
@ -644,6 +645,11 @@ filter {
|
|||
date {
|
||||
match => [ "timestamp", "ISO8601" ]
|
||||
}
|
||||
mutate {
|
||||
rename => {
|
||||
"request" => "request_data"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# Tanner
|
||||
|
|
Loading…
Reference in a new issue