This commit is contained in:
Kameron Kenny 2024-10-28 17:55:49 -04:00
parent f472efcb2a
commit 00e12a7891
No known key found for this signature in database
GPG Key ID: E5006629839D2276
3 changed files with 7 additions and 2 deletions

View File

@ -1,7 +1,7 @@
FROM debian:latest FROM debian:latest
MAINTAINER Kameron Kenny <kkenny379@gmail.com> MAINTAINER Kameron Kenny <kkenny379@gmail.com>
LABEL version="20241028174708" LABEL version="20241028175549"
LABEL description="Debian Based syslog-ng" LABEL description="Debian Based syslog-ng"
RUN apt-get update RUN apt-get update

View File

@ -6,6 +6,10 @@ parser p_suricata_stats_json {
json-parser(prefix(".suricata.stats.")); json-parser(prefix(".suricata.stats."));
}; };
parser p_suricata_stats_stats {
json-parser( "${MESSAGE.stats}" );
};
destination d_nas81_suricata { destination d_nas81_suricata {
elasticsearch-http( elasticsearch-http(
index("nas81-suricata") index("nas81-suricata")
@ -36,6 +40,7 @@ log {
filter(f_nas81_host); filter(f_nas81_host);
filter(f_suricata); filter(f_suricata);
filter(f_nas81_suricata_stats); filter(f_nas81_suricata_stats);
parser(p_suricata_stats_stats);
parser(p_suricata_stats_json); parser(p_suricata_stats_json);
destination(d_nas81_suricata_stats); destination(d_nas81_suricata_stats);
flags(final); flags(final);

View File

@ -10,7 +10,7 @@ services:
syslog-ng: syslog-ng:
build: build:
dockerfile: Dockerfile dockerfile: Dockerfile
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241028174708 image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241028175549
container_name: syslog-ng container_name: syslog-ng
restart: unless-stopped restart: unless-stopped
networks: networks: