Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-20 06:02:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix data fields with regard to the request field, log4pot, nginx

Browse source
This commit is contained in:
Marco Ochse 2022-01-17 17:10:48 +01:00
parent ed79b72869
commit cac7cdcec6
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
docker/elk/logstash/dist/http_output.conf vendored
View file

@ -578,6 +578,7 @@ filter {
}
mutate {
rename => {
"request" => "request_uri"
"server_port" => "dest_port"
"port" => "src_port"
"client" => "src_ip"
@ -644,6 +645,11 @@ filter {
date {
match => [ "timestamp", "ISO8601" ]
}
mutate {
rename => {
"request" => "request_data"
}
}
}
# Tanner

6
docker/elk/logstash/dist/logstash.conf vendored
View file

@ -578,6 +578,7 @@ filter {
}
mutate {
rename => {
"request" => "request_uri"
"server_port" => "dest_port"
"port" => "src_port"
"client" => "src_ip"
@ -644,6 +645,11 @@ filter {
date {
match => [ "timestamp", "ISO8601" ]
}
mutate {
rename => {
"request" => "request_data"
}
}
}
# Tanner