added Malcolm
This commit is contained in:
@@ -0,0 +1,6 @@
|
||||
input {
|
||||
pipeline {
|
||||
address => "${ELASTICSEARCH_PIPELINE_ADDRESS_INTERNAL:internal-es}"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -0,0 +1,9 @@
|
||||
output {
|
||||
elasticsearch {
|
||||
id => "output_elasticsearch_moloch"
|
||||
hosts => "${ES_HOSTS:elasticsearch:9200}"
|
||||
manage_template => false
|
||||
index => "sessions2-%{+YYMMdd}"
|
||||
document_id => "%{+YYMMdd}-%{zeekLogDocId}"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user