mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-07 09:48:58 +00:00
17 lines
383 B
YAML
17 lines
383 B
YAML
title: ELK Linux Indices and Mappings
|
|
logsources:
|
|
apache:
|
|
category: webserver
|
|
index: logstash-apache-*
|
|
webapp-error:
|
|
category: application
|
|
index: logstash-apache_error-*
|
|
linux-auth:
|
|
product: linux
|
|
service: auth
|
|
index: logstash-auth-*
|
|
fieldmappings:
|
|
client_ip: clientip
|
|
url: request
|
|
defaultindex: logstash-*
|