Archive-Team
/
docker-mailserver
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

switch to filebeats input

This commit is contained in:
Pablo Castorino 2016-09-29 16:14:15 -03:00
parent 8392234229
commit e7b034b960
3 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
elk/01-mailserver.conf
View File

@ -1,7 +0,0 @@
input {
udp {
port => 10514
type => "syslog"
}
}

6
elk/02-beats-input.conf Normal file
View File

@ -0,0 +1,6 @@
input {
beats {
port => 5044
ssl => false
}
}

6
elk/Dockerfile
View File

@ -17,8 +17,10 @@ RUN mkdir -p /usr/share/GeoIP && \
WORKDIR ${LOGSTASH_HOME} WORKDIR ${LOGSTASH_HOME}
RUN gosu logstash bin/logstash-plugin install --local --no-verify logstash-filter-geoip RUN gosu logstash bin/logstash-plugin install --local --no-verify logstash-filter-geoip
# add mailserver listen # override beats input
ADD 01-mailserver.conf /etc/logstash/conf.d/ ADD 02-beats-input.conf /etc/logstash/conf.d/
# override syslog # override syslog
ADD 10-syslog.conf /etc/logstash/conf.d/ ADD 10-syslog.conf /etc/logstash/conf.d/