94 lines
3.1 KiB
Plaintext
94 lines
3.1 KiB
Plaintext
template t_suricata_nas81_stats {
|
|
template("{ \"timestamp\": \"${ISODATE}\", \"event_type\": \"stats\", \"stats\": { \
|
|
\"uptime\": ${uptime}, \
|
|
\"capture\": { \
|
|
\"kernel_packets\": ${kernel_packets}, \
|
|
\"kernel_drops\": ${kernel_drops}, \
|
|
\"errors\": ${errors}, \
|
|
\"afpacket\": { \
|
|
\"busy_loop_avg\": ${busy_loop_avg}, \
|
|
\"polls\": ${polls}, \
|
|
\"poll_signal\": ${poll_signal}, \
|
|
\"poll_timeout\": ${poll_timeout}, \
|
|
\"poll_data\": ${poll_data}, \
|
|
\"poll_errors\": ${poll_errors}, \
|
|
\"send_errors\": ${send_errors} \
|
|
} \
|
|
}, \
|
|
\"decoder\": { \
|
|
\"pkts\": ${pkts}, \
|
|
\"bytes\": ${bytes}, \
|
|
\"invalid\": ${invalid}, \
|
|
\"protocols\": { \
|
|
\"ipv4\": ${ipv4}, \
|
|
\"ipv6\": ${ipv6}, \
|
|
\"ethernet\": ${ethernet}, \
|
|
\"arp\": ${arp}, \
|
|
\"tcp\": ${tcp}, \
|
|
\"udp\": ${udp}, \
|
|
\"icmp\": { \
|
|
\"icmpv4\": ${icmpv4}, \
|
|
\"icmpv6\": ${icmpv6} \
|
|
}, \
|
|
\"vlan\": ${vlan} \
|
|
}, \
|
|
\"errors\": { \
|
|
\"trunc_pkt\": ${trunc_pkt}, \
|
|
\"opt_pad_required\": ${opt_pad_required}, \
|
|
\"zero_len_padn\": ${zero_len_padn} \
|
|
} \
|
|
}, \
|
|
\"tcp\": { \
|
|
\"syn\": ${syn}, \
|
|
\"synack\": ${synack}, \
|
|
\"rst\": ${rst}, \
|
|
\"active_sessions\": ${active_sessions}, \
|
|
\"sessions\": ${sessions}, \
|
|
\"memuse\": ${memuse} \
|
|
}, \
|
|
\"flow\": { \
|
|
\"total\": ${total_flow}, \
|
|
\"active\": ${active_flow}, \
|
|
\"tcp\": ${tcp_flow}, \
|
|
\"udp\": ${udp_flow}, \
|
|
\"icmp\": { \
|
|
\"icmpv4\": ${icmpv4_flow}, \
|
|
\"icmpv6\": ${icmpv6_flow} \
|
|
} \
|
|
}, \
|
|
\"detect\": { \
|
|
\"engines\": [{ \
|
|
\"id\": ${engine_id}, \
|
|
\"last_reload\": \"${last_reload}\", \
|
|
\"rules_loaded\": ${rules_loaded}, \
|
|
\"rules_failed\": ${rules_failed} \
|
|
}], \
|
|
\"alert\": { \
|
|
\"count\": ${alert_count}, \
|
|
\"suppressed\": ${alert_suppressed} \
|
|
} \
|
|
}, \
|
|
\"app_layer\": { \
|
|
\"flow\": { \
|
|
\"http\": ${http_flow}, \
|
|
\"tls\": ${tls_flow}, \
|
|
\"dns\": { \
|
|
\"udp\": ${dns_udp_flow} \
|
|
}, \
|
|
\"failed_tcp\": ${failed_tcp}, \
|
|
\"failed_udp\": ${failed_udp} \
|
|
} \
|
|
}, \
|
|
\"memory\": { \
|
|
\"capture\": { \
|
|
\"pressure\": ${memcap_pressure}, \
|
|
\"pressure_max\": ${memcap_pressure_max} \
|
|
}, \
|
|
\"http\": { \
|
|
\"memuse\": ${http_memuse} \
|
|
} \
|
|
} \
|
|
}}\n");
|
|
};
|
|
|