update geoip
This commit is contained in:
parent
079a0fe73c
commit
29a15b9b2a
|
@ -51,7 +51,7 @@ parser p_bind_client_ip_geoip2_city {
|
||||||
geoip2(
|
geoip2(
|
||||||
"${bind9.client.ip}",
|
"${bind9.client.ip}",
|
||||||
prefix( "geoip2.source." )
|
prefix( "geoip2.source." )
|
||||||
database( "../GeoIP/GeoLite2-City.mmdb" )
|
database( "GeoIP/GeoLite2-City.mmdb" )
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
@ -40,7 +40,7 @@ parser p_nginx_client_ip_geoip2_city {
|
||||||
geoip2(
|
geoip2(
|
||||||
"${nginx.client.ip}",
|
"${nginx.client.ip}",
|
||||||
prefix( "geoip2.source." )
|
prefix( "geoip2.source." )
|
||||||
database( "../GeoIP/GeoLite2-City.mmdb" )
|
database( "GeoIP/GeoLite2-City.mmdb" )
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
@ -20,7 +20,7 @@ parser p_fw_src_ip_geoip2_city {
|
||||||
geoip2(
|
geoip2(
|
||||||
"${kv.SRC}",
|
"${kv.SRC}",
|
||||||
prefix( "geoip2.source." )
|
prefix( "geoip2.source." )
|
||||||
database( "../GeoIP/GeoLite2-City.mmdb" )
|
database( "GeoIP/GeoLite2-City.mmdb" )
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -28,7 +28,7 @@ parser p_fw_dst_ip_geoip2_city {
|
||||||
geoip2(
|
geoip2(
|
||||||
"${kv.DST}",
|
"${kv.DST}",
|
||||||
prefix( "geoip2.destination." )
|
prefix( "geoip2.destination." )
|
||||||
database( "../GeoIP/GeoLite2-City.mmdb" )
|
database( "GeoIP/GeoLite2-City.mmdb" )
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -36,7 +36,7 @@ parser p_suricata_dest_ip_geoip2_city {
|
||||||
geoip2(
|
geoip2(
|
||||||
"${suricata.dest_ip}",
|
"${suricata.dest_ip}",
|
||||||
prefix( "geoip2.destination." )
|
prefix( "geoip2.destination." )
|
||||||
database( "../GeoIP/GeoLite2-City.mmdb" )
|
database( "GeoIP/GeoLite2-City.mmdb" )
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -44,7 +44,7 @@ parser p_suricata_src_ip_geoip2_city {
|
||||||
geoip2(
|
geoip2(
|
||||||
"${suricata.src_ip}",
|
"${suricata.src_ip}",
|
||||||
prefix( "geoip2.source." )
|
prefix( "geoip2.source." )
|
||||||
database( "../GeoIP/GeoLite2-City.mmdb" )
|
database( "GeoIP/GeoLite2-City.mmdb" )
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -62,7 +62,7 @@ destination d_unifi_suricata {
|
||||||
--exclude DATE @timestamp=${ISODATE})")
|
--exclude DATE @timestamp=${ISODATE})")
|
||||||
persist-name("d_unifi_suricata")
|
persist-name("d_unifi_suricata")
|
||||||
);
|
);
|
||||||
}
|
};
|
||||||
|
|
||||||
destination d_unifi_bash_history {
|
destination d_unifi_bash_history {
|
||||||
elasticsearch-http(
|
elasticsearch-http(
|
||||||
|
|
Loading…
Reference in New Issue