ES Teamplate firewall

Dockerfile

@@ -1,6 +1,6 @@
 FROM lscr.io/linuxserver/syslog-ng:latest
 
-LABEL version="20240614.1.1"
+LABEL version="20240614.1.2"
 LABEL description="syslog-ng"
 
 RUN mkdir -p /config

config/syslog-ng.conf

@@ -35,7 +35,15 @@ destination d_unifi_firewall {
     url("http://pi501.in.thelinuxpro.net:9200/_bulk")
     template("$(format-json --scope rfc5424 --scope dot-nv-pairs
     --rekey .* --shift 1 --scope nv-pairs
-    --exclude DATE @timestamp=${ISODATE})")
+    --exclude DATE @timestamp=${ISODATE}
+    DESCRIPTION=$(DESC)
+    INTERFACE_IN=$(IN)
+    INTERFACE_OUT=$(OUT)
+    IP_SOURCE=$(SRC)
+    IP_DESTINATION=$(DST)
+    PROTOCOL=$(PROTO)
+    PORT_SOURCE=$(SPT)
+    PORT_DESTINATION=$(DPT))")
     persist-name("d_unifi_firewall")
   );
 };

docker-compose.yml

@@ -10,7 +10,7 @@ services:
   syslog-ng:
     build:
       dockerfile: Dockerfile
-    image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:240614.1.1
+    image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:240614.1.2
     container_name: syslog-ng
     environment:
       - PUID=0