mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-09 02:26:48 +00:00
27 lines
556 B
YAML
27 lines
556 B
YAML
title: Logstash Linux project (https://github.com/thomaspatzke/logstash-linux)
|
|
order: 20
|
|
backends:
|
|
- es-qs
|
|
- es-dsl
|
|
- es-rule
|
|
- kibana
|
|
- xpack-watcher
|
|
- elastalert
|
|
- elastalert-dsl
|
|
- ee-outliers
|
|
logsources:
|
|
apache:
|
|
category: webserver
|
|
index: logstash-apache-*
|
|
webapp-error:
|
|
category: application
|
|
index: logstash-apache_error-*
|
|
linux-auth:
|
|
product: linux
|
|
service: auth
|
|
index: logstash-auth-*
|
|
fieldmappings:
|
|
client_ip: clientip
|
|
url: request
|
|
defaultindex: logstash-*
|