iac
/
syslog-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

stats

This commit is contained in:
Kameron Kenny 2024-10-28 18:01:22 -04:00
parent 1c2dcaf5b0
commit 38087972a5
No known key found for this signature in database
GPG Key ID: E5006629839D2276
3 changed files with 4 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile
View File

@ -1,7 +1,7 @@
FROM debian:latest FROM debian:latest
MAINTAINER Kameron Kenny <kkenny379@gmail.com> MAINTAINER Kameron Kenny <kkenny379@gmail.com>
LABEL version="20241028175819" LABEL version="20241028180122"
LABEL description="Debian Based syslog-ng" LABEL description="Debian Based syslog-ng"
RUN apt-get update RUN apt-get update

8
config/syslog-ng.conf.d/nas81.conf
View File

@ -3,11 +3,8 @@ filter f_nas81_host { match("nas81" value("HOST")); };
filter f_nas81_suricata_stats { match("stats" value("MESSAGE")); }; filter f_nas81_suricata_stats { match("stats" value("MESSAGE")); };
parser p_suricata_stats_json { parser p_suricata_stats_json {
json-parser(prefix(".suricata.stats.")); marker("stats:")
}; json-parser(prefix("suricata.stats."));
parser p_suricata_stats_stats {
json-parser( "${MESSAGE}" );
}; };
destination d_nas81_suricata { destination d_nas81_suricata {
@ -40,7 +37,6 @@ log {
filter(f_nas81_host); filter(f_nas81_host);
filter(f_suricata); filter(f_suricata);
filter(f_nas81_suricata_stats); filter(f_nas81_suricata_stats);
parser(p_suricata_stats_stats);
parser(p_suricata_stats_json); parser(p_suricata_stats_json);
destination(d_nas81_suricata_stats); destination(d_nas81_suricata_stats);
flags(final); flags(final);

2
docker-compose.yml
View File

@ -10,7 +10,7 @@ services:
syslog-ng: syslog-ng:
build: build:
dockerfile: Dockerfile dockerfile: Dockerfile
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241028175819 image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241028180122
container_name: syslog-ng container_name: syslog-ng
restart: unless-stopped restart: unless-stopped
networks: networks: