added Malcolm
This commit is contained in:
@@ -0,0 +1,3 @@
|
||||
queue.type: persisted
|
||||
queue.max_bytes: 4gb
|
||||
path.queue: "/logstash-persistent-queue"
|
||||
+6
@@ -0,0 +1,6 @@
|
||||
input {
|
||||
pipeline {
|
||||
address => "${ELASTICSEARCH_PIPELINE_ADDRESS_EXTERNAL:external-es}"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -0,0 +1,13 @@
|
||||
output {
|
||||
elasticsearch {
|
||||
id => "output_external_elasticsearch_moloch"
|
||||
hosts => "${ES_EXTERNAL_HOSTS}"
|
||||
ssl => "${ES_EXTERNAL_SSL:true}"
|
||||
ssl_certificate_verification => "${ES_EXTERNAL_SSL_CERTIFICATE_VERIFICATION:false}"
|
||||
user => "${ES_EXTERNAL_USER:}"
|
||||
password => "${ES_EXTERNAL_PASSWORD:}"
|
||||
manage_template => false
|
||||
index => "sessions2-%{+YYMMdd}"
|
||||
document_id => "%{+YYMMdd}-%{zeekLogDocId}"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user