iac
/
syslog-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

stats

This commit is contained in:
Kameron Kenny 2024-10-28 17:19:52 -04:00
parent 2ca0ee4737
commit debc4c5dd6
No known key found for this signature in database
GPG Key ID: E5006629839D2276
3 changed files with 6 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile
View File

@ -1,7 +1,7 @@
FROM debian:latest FROM debian:latest
MAINTAINER Kameron Kenny <kkenny379@gmail.com> MAINTAINER Kameron Kenny <kkenny379@gmail.com>
LABEL version="20241028170659" LABEL version="20241028171952"
LABEL description="Debian Based syslog-ng" LABEL description="Debian Based syslog-ng"
RUN apt-get update RUN apt-get update

12
config/syslog-ng.conf.d/nas81.conf
View File

@ -2,13 +2,8 @@ filter f_nas81_suricata { match("suricata" value("PROGRAM")); };
filter f_nas81_host { match("nas81" value("HOST")); }; filter f_nas81_host { match("nas81" value("HOST")); };
filter f_nas81_suricata_stats { match("stats" value("MESSAGE")); }; filter f_nas81_suricata_stats { match("stats" value("MESSAGE")); };
template t_json {
template("${MESSAGE}\n");
template-escape(no);
};
parser p_suricata_stats_json { parser p_suricata_stats_json {
json-parser(prefix("suricata.stats.")); json-parser(prefix(".suricata.stats."));
}; };
destination d_nas81_suricata { destination d_nas81_suricata {
@ -28,9 +23,10 @@ destination d_nas81_suricata_stats {
index("nas81") index("nas81")
type("") type("")
url("http://pi501.in.thelinuxpro.net:9200/_bulk") url("http://pi501.in.thelinuxpro.net:9200/_bulk")
template("$(format-json --scope nv_pairs,core,syslog,all_macros,selected_macros,everything template("$(format-json --scope rfc5424 --scope dot-nv-pairs
--rekey .* --shift 1 --scope nv-pairs
--exclude DATE @timestamp=${ISODATE})") --exclude DATE @timestamp=${ISODATE})")
persist-name("d_nas81") persist-name("d_nas81_suricata_stats")
); );
}; };

2
docker-compose.yml
View File

@ -10,7 +10,7 @@ services:
syslog-ng: syslog-ng:
build: build:
dockerfile: Dockerfile dockerfile: Dockerfile
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241028170659 image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241028171952
container_name: syslog-ng container_name: syslog-ng
restart: unless-stopped restart: unless-stopped
networks: networks: