stats

Dockerfile

@@ -1,7 +1,7 @@
 FROM debian:latest
 MAINTAINER Kameron Kenny <kkenny379@gmail.com>
 
-LABEL version="20241029142406"
+LABEL version="20241029143033"
 LABEL description="Debian Based syslog-ng"
 
 RUN apt-get update

config/syslog-ng.conf.d/nas81.conf

@@ -4,7 +4,7 @@ filter f_nas81_suricata_stats { match("suricata-stats" value("PROGRAM")); };
 
 parser p_suricata_stats_json {
   json-parser(
-    prefix("suricata.")
+    prefix("suricata.stats.")
   );
 };
 
@@ -28,7 +28,7 @@ destination d_nas81_suricata_stats {
     template("$(format-json --scope rfc5424 --scope dot-nv-pairs
     --rekey .* --shift 1 --scope nv-pairs
     --exclude DATE @timestamp=${ISODATE}
-    --exclude MESSAGE)")
+    --exclude MESSAGE delimiter('\n')")
     persist-name("d_nas81_suricata_stats")
   );
 };
@@ -38,7 +38,7 @@ destination d_file_suricata {
     template("$(format-json --scope rfc5424 --scope dot-nv-pairs
     --rekey .* --shift 1 --scope nv-pairs
     --exclude DATE @timestamp=${ISODATE}
-    --exclude MESSAGE)")
+    --exclude MESSAGE delimiter('\n')")
   );
 };
 

docker-compose.yml

@@ -10,7 +10,7 @@ services:
   syslog-ng:
     build:
       dockerfile: Dockerfile
-    image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241029142406
+    image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241029143033
     container_name: syslog-ng
     restart: unless-stopped
     networks: