Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-01 04:22:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

bump elk stack to 7.16.2

Browse source 
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
This commit is contained in:
t3chn0m4g3 2021-12-20 11:17:18 +00:00
parent beb9abca16
commit aaccb43471
5 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
docker/elk/elasticsearch/Dockerfile
View file

@ -1,7 +1,7 @@
FROM alpine:3.14
#
# VARS
ENV ES_VER=7.16.1 \
ENV ES_VER=7.16.2 \
ES_JAVA_HOME=/usr/lib/jvm/java-16-openjdk
# Include dist

2
docker/elk/kibana/Dockerfile
View file

@ -1,7 +1,7 @@
FROM node:16.13.0-alpine3.14
#
# VARS
ENV KB_VER=7.16.1
ENV KB_VER=7.16.2
#
# Include dist
ADD dist/ /root/dist/

2
docker/elk/logstash/Dockerfile
View file

@ -1,7 +1,7 @@
FROM alpine:3.14
#
# VARS
ENV LS_VER=7.16.1
ENV LS_VER=7.16.2
# Include dist
ADD dist/ /root/dist/
#

4
docker/elk/logstash/dist/logstash.conf vendored
View file

@ -670,12 +670,12 @@ if "_jsonparsefailure" in [tags] { drop {} }
geoip {
cache_size => 10000
source => "src_ip"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.6-java/vendor/GeoLite2-City.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.8-java/vendor/GeoLite2-City.mmdb"
}
geoip {
cache_size => 10000
source => "src_ip"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.6-java/vendor/GeoLite2-ASN.mmdb"
database => "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-7.2.8-java/vendor/GeoLite2-ASN.mmdb"
}
translate {
refresh_interval => 86400

1
etc/logrotate/logrotate.conf
View file

@ -29,6 +29,7 @@
/data/honeytrap/log/*.log
/data/honeytrap/log/*.json
/data/ipphoney/log/*.json
/data/log4pot/log/*.log
/data/mailoney/log/*.log
/data/medpot/log/*.log
/data/nginx/log/*.log