зеркало из https://github.com/mozilla/MozDef.git
averez-doc: adding nxlog-syslog configuration snippet
This commit is contained in:
Родитель
30fe2e19fb
Коммит
558dbafe56
|
@ -0,0 +1,10 @@
|
|||
# beaver-syslog
|
||||
|
||||
This configuration for [nxlog](http://nxlog-ce.sourceforge.net) ships syslog logs stored in `/var/log/*.log` to mozdef.
|
||||
|
||||
To run it:
|
||||
|
||||
```
|
||||
cp nxlog.conf /etc/nxlog/
|
||||
sudo service nxlog restart
|
||||
```
|
|
@ -0,0 +1,23 @@
|
|||
<Extension syslog>
|
||||
Module xm_syslog
|
||||
</Extension>
|
||||
<Extension json>
|
||||
Module xm_json
|
||||
</Extension>
|
||||
CacheDir /tmp/nxlog
|
||||
PidFile "nxlog.pid"
|
||||
|
||||
<Input in>
|
||||
Module im_file
|
||||
File '/var/log/*.log'
|
||||
ReadFromLast TRUE
|
||||
Exec parse_syslog(); to_json();
|
||||
</Input>
|
||||
<Output outes>
|
||||
Module om_http
|
||||
URL http://mozdef.example.com:8080/nxlog/
|
||||
</Output>
|
||||
|
||||
<Route httpout>
|
||||
Path in => buffer=>outes,outfile
|
||||
</Route
|
Загрузка…
Ссылка в новой задаче