From 8a6979fff5f0c439b8906f1d5ddfd50b3ca04e1b Mon Sep 17 00:00:00 2001 From: Kameron Kenny Date: Thu, 9 Jan 2025 23:57:18 -0500 Subject: [PATCH] update endpoints --- Dockerfile | 2 +- config/syslog-ng.conf.d/nas81.conf | 4 ++-- config/syslog-ng.conf.d/nginx.conf | 2 +- config/syslog-ng.conf.d/unifi.conf | 26 +++++++++++----------- config/syslog-ng.conf.d/zzz-catch-all.conf | 2 +- docker-compose.yml | 2 +- 6 files changed, 19 insertions(+), 19 deletions(-) diff --git a/Dockerfile b/Dockerfile index e624af0..302c1e1 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ FROM debian:latest MAINTAINER Kameron Kenny -LABEL version="20250109233517" +LABEL version="20250109235702" LABEL description="Debian Based syslog-ng" RUN apt-get update diff --git a/config/syslog-ng.conf.d/nas81.conf b/config/syslog-ng.conf.d/nas81.conf index b6697df..f287986 100644 --- a/config/syslog-ng.conf.d/nas81.conf +++ b/config/syslog-ng.conf.d/nas81.conf @@ -91,7 +91,7 @@ log { filter(f_nas81_suricata_stats); rewrite(r_brackets); parser(p_stats_json); - destination(d_nas81_suricata_stats); + destination(d_telegraf); #destination(d_file_suricata_stats); flags(final); }; @@ -103,7 +103,7 @@ log { parser(p_suricata_json); parser(p_suricata_src_ip_geoip2_city); parser(p_suricata_dest_ip_geoip2_city); - destination(d_nas81_suricata); + destination(d_telegraf); #destination(d_file_suricata); flags(final); }; diff --git a/config/syslog-ng.conf.d/nginx.conf b/config/syslog-ng.conf.d/nginx.conf index a234f1e..6d6e2ee 100644 --- a/config/syslog-ng.conf.d/nginx.conf +++ b/config/syslog-ng.conf.d/nginx.conf @@ -68,6 +68,6 @@ log { rewrite(r_nginx_docker_header); parser(p_nginx_docker_header); parser(p_nginx_client_ip_geoip2_city); - destination(d_nginx_logs); + destination(d_telegraf); flags(final); }; diff --git a/config/syslog-ng.conf.d/unifi.conf b/config/syslog-ng.conf.d/unifi.conf index e05966c..d871aa2 100644 --- a/config/syslog-ng.conf.d/unifi.conf +++ b/config/syslog-ng.conf.d/unifi.conf @@ -182,14 +182,14 @@ log { parser(p_suricata_json); parser(p_suricata_src_ip_geoip2_city); parser(p_suricata_dest_ip_geoip2_city); - destination(d_unifi_suricata); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_bash_history); - destination(d_unifi_bash_history); + destination(d_telegraf); flags(final); }; @@ -199,7 +199,7 @@ log { parser(p_kv); parser(p_fw_src_ip_geoip2_city); parser(p_fw_dst_ip_geoip2_city); - destination(d_unifi_firewall); + destination(d_telegraf); flags(final); }; @@ -209,7 +209,7 @@ log { parser(p_kv); parser(p_fw_src_ip_geoip2_city); parser(p_fw_dst_ip_geoip2_city); - destination(d_unifi_firewall); + destination(d_telegraf); flags(final); }; @@ -219,7 +219,7 @@ log { parser(p_kv); parser(p_fw_src_ip_geoip2_city); parser(p_fw_dst_ip_geoip2_city); - destination(d_unifi_firewall); + destination(d_telegraf); flags(final); }; @@ -229,7 +229,7 @@ log { parser(p_kv); parser(p_fw_src_ip_geoip2_city); parser(p_fw_dst_ip_geoip2_city); - destination(d_unifi_firewall); + destination(d_telegraf); flags(final); }; @@ -239,48 +239,48 @@ log { parser(p_kv); parser(p_fw_src_ip_geoip2_city); parser(p_fw_dst_ip_geoip2_city); - destination(d_unifi_firewall); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_dnsmasq); - destination(d_unifi_dnsmasq); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_systemd); - destination(d_unifi_systemd); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_stahtd); - destination(d_unifi_stahtd); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_mcad); - destination(d_unifi_mcad); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_hostapd); - destination(d_unifi_hostapd); + destination(d_telegraf); flags(final); }; log { source(s_network_udp); filter(f_unifi_wlan); - destination(d_unifi_wlan); + destination(d_telegraf); flags(final); }; diff --git a/config/syslog-ng.conf.d/zzz-catch-all.conf b/config/syslog-ng.conf.d/zzz-catch-all.conf index f388fe0..9394f11 100644 --- a/config/syslog-ng.conf.d/zzz-catch-all.conf +++ b/config/syslog-ng.conf.d/zzz-catch-all.conf @@ -16,5 +16,5 @@ log { source(s_local); source(s_network_tcp); source(s_network_udp); - destination(d_syslog_ng_es); + destination(d_telegraf); }; diff --git a/docker-compose.yml b/docker-compose.yml index 5c5c94a..97f8632 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -10,7 +10,7 @@ services: syslog-ng: build: dockerfile: Dockerfile - image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20250109233517 + image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20250109235702 container_name: syslog-ng restart: unless-stopped networks: