From f669438abd5fa975882647f01055bcb3258da668 Mon Sep 17 00:00:00 2001 From: Kameron Kenny <1267885+kkenny@users.noreply.github.com> Date: Tue, 29 Oct 2024 15:32:34 -0400 Subject: [PATCH] stats --- Dockerfile | 2 +- config/syslog-ng.conf.d/nas81.conf | 5 +++++ docker-compose.yml | 2 +- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index f0e4f25..c48ab2a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ FROM debian:latest MAINTAINER Kameron Kenny -LABEL version="20241029151620" +LABEL version="20241029153234" LABEL description="Debian Based syslog-ng" RUN apt-get update diff --git a/config/syslog-ng.conf.d/nas81.conf b/config/syslog-ng.conf.d/nas81.conf index 801703c..4f43f31 100644 --- a/config/syslog-ng.conf.d/nas81.conf +++ b/config/syslog-ng.conf.d/nas81.conf @@ -12,6 +12,10 @@ rewrite r_set_message { set("extracted", value("MESSAGE")); }; +rewrite r_stats_rename { + rename("suricata.stats" "suricata_stats"); +}; + destination d_nas81_suricata { elasticsearch-http( index("nas81-suricata") @@ -67,6 +71,7 @@ log { filter(f_nas81_host); filter(f_nas81_suricata_stats); parser(p_suricata_stats_json); + rewrite(r_stats_rename); destination(d_nas81_suricata_stats); destination(d_file_suricata_stats); flags(final); diff --git a/docker-compose.yml b/docker-compose.yml index cc7ee11..18b5f38 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -10,7 +10,7 @@ services: syslog-ng: build: dockerfile: Dockerfile - image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241029151620 + image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:20241029153234 container_name: syslog-ng restart: unless-stopped networks: