mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-29 11:48:52 +00:00
0e5986d2df
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE) Add Index Lifecycle Management in favor of elasticsearch-curator Point all images to 2203 tags
20 lines
497 B
Text
20 lines
497 B
Text
# Input section
|
|
input {
|
|
http {
|
|
id => "tpot"
|
|
host => "0.0.0.0"
|
|
port => "80"
|
|
}
|
|
}
|
|
|
|
# Output section
|
|
output {
|
|
elasticsearch {
|
|
hosts => ["elasticsearch:9200"]
|
|
# With templates now being legacy we need to set the daily index with its template manually. Otherwise a new index might be created with differents settings configured through Kibana.
|
|
index => "logstash-%{+YYYY.MM.dd}"
|
|
template => "/etc/logstash/tpot_es_template.json"
|
|
template_overwrite => "true"
|
|
}
|
|
|
|
}
|