This commit is contained in:
Kameron Kenny 2024-10-30 09:22:13 -04:00
parent 36a6a10124
commit 3e9174f40b
No known key found for this signature in database
GPG Key ID: E5006629839D2276
3 changed files with 5 additions and 9 deletions

View File

@ -1,7 +1,7 @@
FROM debian:latest
MAINTAINER Kameron Kenny <kkenny379@gmail.com>
LABEL version="20241030092044"
LABEL version="20241030092213"
LABEL description="Debian Based syslog-ng"
RUN apt-get update

View File

@ -48,12 +48,6 @@ parser p_suricata_src_ip_geoip2_city {
);
};
template t_elastic {
format-json --scope rfc5424 --scope dot-nv-pairs
--rekey .* --shift 1 --scope nv-pairs
--exclude DATE @timestamp=${ISODATE}
};
destination d_unifi_fw { file("/var/log/unifi_fw.log"); };
destination d_unifi_suricata {
@ -63,7 +57,9 @@ destination d_unifi_suricata {
user("elastic")
password("forty6and2")
url("http://pi501.in.thelinuxpro.net:9200/_bulk")
template(t_elastic)
template("$(format-json --scope rfc5424 --scope dot-nv-pairs
--rekey .* --shift 1 --scope nv-pairs
--exclude DATE @timestamp=${ISODATE})")
persist-name("d_unifi_suricata")
);
};

View File

@ -10,7 +10,7 @@ services:
syslog-ng:
build:
dockerfile: Dockerfile
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241030092044
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241030092213
container_name: syslog-ng
restart: unless-stopped
networks: