Cyberdefense/VulnWhisperer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix docker-compose logstash config (#92)

Browse Source 
* ignore nessus requests warnings

* docker-compose fully working with vulnwhisperer integrated

* remove comments docker-compose

* documenting docker-compose

* Readme corrections

* fix after recheck everything works out of the box

* fix exits that break the no specified section execution mode

* fix docker qualysapi issue, updated README

* revert change on deps/qualysapi/qualysapi/util.py (no effect)

* temporarily changed Dockerfile link to the working one

* fix docker-compose logstash config

* permissions needed for logstash container to work

* changing default path qualys, there are no folders
This commit is contained in:
qmontal
2018-08-20 15:20:58 +02:00
committed by Austin Taylor
parent a159d5b06f
commit fc5f9b5b7c
6 changed files with 23 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docker/2000_qualys_web_scans.conf
View File

@ -6,7 +6,7 @@
input {
file {
path => "/opt/VulnWhisperer/data/qualys/scans/**/*.json"
path => "/opt/VulnWhisperer/data/qualys/*.json"
type => json
codec => json
start_position => "beginning"
@ -146,7 +146,7 @@ output {
if "qualys" in [tags] {
stdout { codec => rubydebug }
elasticsearch {
hosts => [ "vulnwhisp_es1.local:9200" ]
hosts => [ "vulnwhisp-es1.local:9200" ]
index => "logstash-vulnwhisperer-%{+YYYY.MM}"
}
}

2
docker/3000_openvas.conf
View File

@ -139,7 +139,7 @@ output {
if "openvas" in [tags] {
stdout { codec => rubydebug }
elasticsearch {
hosts => [ "vulnwhisp_es1.local:9200" ]
hosts => [ "vulnwhisp-es1.local:9200" ]
index => "logstash-vulnwhisperer-%{+YYYY.MM}"
}
}

11
docker/logstash.yml
View File

@ -1,6 +1,5 @@
path.data: /var/lib/logstash
path.config: /etc/logstash/conf.d
#path.logs: /var/log/logstash
xpack.monitoring.elasticsearch.url: [ "vulnwhisp-es1.local:9200" ]
xpack.monitoring.elasticsearch.username: "elastic"
xpack.monitoring.elasticsearch.password: "changeme"
path.config: /usr/share/logstash/pipeline/
xpack.monitoring.elasticsearch.password: changeme
xpack.monitoring.elasticsearch.url: vulnwhisp-es1.local:9200
xpack.monitoring.elasticsearch.username: elastic
xpack.monitoring.enabled: false