Cyberdefense/VulnWhisperer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

rename qualys modules to be more accurate

Browse Source
This commit is contained in:
pemontto
2019-05-03 16:39:57 +01:00
parent fb76b0a1ce
commit 44d75c397f
8 changed files with 56 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
resources/elk6/pipeline/2000_qualys_web_scans.conf
View File

@ -6,19 +6,19 @@
input {
file {
path => [ "/opt/VulnWhisperer/data/qualys_vuln/*.json" ]
path => [ "/opt/VulnWhisperer/data/qualys_vm/*.json" ]
codec => json
start_position => "beginning"
tags => [ "qualys_vuln" ]
tags => [ "qualys_vm" ]
mode => "read"
start_position => "beginning"
file_completed_action => "delete"
}
file {
path => [ "/opt/VulnWhisperer/data/qualys_web/*.json" ]
path => [ "/opt/VulnWhisperer/data/qualys_was/*.json" ]
codec => json
start_position => "beginning"
tags => [ "qualys_web" ]
tags => [ "qualys_was" ]
mode => "read"
start_position => "beginning"
file_completed_action => "delete"
@ -26,7 +26,7 @@ input {
}
filter {
if "qualys_vuln" in [tags] or "qualys_web" in [tags] {
if "qualys_vm" in [tags] or "qualys_was" in [tags] {
date {
match => [ "scan_time", "UNIX" ]
target => "@timestamp"
@ -82,7 +82,7 @@ filter {
}
}
output {
if "qualys_vuln" in [tags] or "qualys_web" in [tags] {
if "qualys_vm" in [tags] or "qualys_was" in [tags] {
if [@metadata][id] {
elasticsearch {
hosts => [ "elasticsearch:9200" ]