Files
blue-team-tools/tools/config/elk-linux.yml
T

17 lines
383 B
YAML
Raw Normal View History

2020-06-25 13:59:51 +02:00
title: ELK Linux Indices and Mappings
2020-05-08 13:41:52 +03:00
logsources:
apache:
category: webserver
index: logstash-apache-*
webapp-error:
category: application
index: logstash-apache_error-*
linux-auth:
product: linux
service: auth
index: logstash-auth-*
fieldmappings:
client_ip: clientip
url: request
defaultindex: logstash-*