Skip to content

Commit

Permalink
Adding logstash pipeline for python script
Browse files Browse the repository at this point in the history
  • Loading branch information
f-galland committed Feb 5, 2024
1 parent e6784f3 commit 116b22b
Showing 1 changed file with 35 additions and 0 deletions.
35 changes: 35 additions & 0 deletions integrations/amazon-security-lake/pipe-output.conf
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
input {
opensearch {
hosts => ["127.0.0.1:9200"]
user => "${WAZUH_INDEXER_USERNAME}"
password => "${WAZUH_INDEXER_PASSWORD}"
index => "wazuh-alerts-4.x-*"
ssl => true
ca_file => "/etc/logstash/wi-certs/root-ca.pem"
query => '{
"query": {
"range": {
"@timestamp": {
"gt": "now-1m"
}
}
}
}'
target => "_source"
schedule => "* * * * *"
}
}

output {

stdout { codec => rubydebug }

pipe
{
id => "securityLake"
message_format => "%{_source}"
ttl => "10"
command => "/usr/bin/env python3 /usr/local/bin/stdin_to_securitylake.py -d"
}

}

0 comments on commit 116b22b

Please sign in to comment.