Add Elastic integration folder

Draft
wazuh · Jun 4, 2024 · 3ecd8f7 · 3ecd8f7
1 parent 4dbbf22
commit 3ecd8f7
Show file tree

Hide file tree

Showing 5 changed files with 2,106 additions and 1 deletion.
diff --git a/integrations/.gitignore b/integrations/.gitignore
@@ -1,4 +1,3 @@
-elastic
 opensearch
 splunk
 common

diff --git a/integrations/elastic/Dockerfile b/integrations/elastic/Dockerfile
@@ -0,0 +1,19 @@
+FROM opensearchproject/logstash-oss-with-opensearch-output-plugin:latest
+
+ENV LOGSTASH_KEYSTORE_PASS "SecretPassword"
+ENV LS_PATH "/usr/share/logstash"
+USER logstash
+
+# https://github.com/elastic/logstash/issues/6600
+# Install plugin
+RUN LS_JAVA_OPTS="-Xms1024m -Xmx1024m" logstash-plugin install logstash-input-opensearch
+
+COPY --chown=logstash:logstash logstash/pipeline /usr/share/logstash/pipeline
+# Copy and run the setup.sh script to create and configure a keystore for Logstash.
+COPY --chown=logstash:logstash logstash/setup.sh /usr/share/logstash/bin/setup.sh
+RUN bash /usr/share/logstash/bin/setup.sh
+
+# Disable ECS compatibility
+RUN `echo "pipeline.ecs_compatibility: disabled" >> /usr/share/logstash/config/logstash.yml`
+
+WORKDIR /usr/share/logstash
-Original file line number
+Diff line change
@@ -1,4 +1,3 @@
-    elastic
     opensearch
     splunk
     common
@@ Expand Down @@