-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathexample.yaml
111 lines (111 loc) · 2.44 KB
/
example.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
archive:
input:
kafka:
brokers:
- localhost:9092
consumer_group: peek
topics: []
output:
folder: ""
rotate:
interval: 1h0m0s
assetsmerge:
input:
kafka:
brokers:
- localhost:9092
consumer_group: peek
topic_assets_providentia: peek-assets-providentia
topic_assets_vcenter: peek-assets-vcenter
output:
kafka:
brokers:
- localhost:9092
enabled: false
topic: peek
strip_prefix: ""
elastic:
input:
kafka:
brokers:
- localhost:9092
consumer_group: peek
topics: []
output:
elasticsearch:
hosts:
- http://localhost:9200
prefix: peek
xpack:
pass: ""
user: ""
enrich:
input:
kafka:
brokers:
- localhost:9092
consumer_group: peek
topic_assets: assets
topic_map: []
topic_sid_mitre: meerkat_sid_mitre_map
log:
interval: 30s
output:
kafka:
brokers:
- localhost:9092
enabled: false
topic: peek
topic_emit: emit
topic_oracle: peek-oracle
topic_split: false
sigma:
ruleset_path: []
mitremeerkat:
input:
file: ""
output:
kafka:
brokers:
- localhost:9092
enabled: false
topic: peek
oracle:
input:
kafka:
brokers:
- localhost:9092
consumer_group: peek
topic_assets: assets
topic_oracle: peek-oracle
topic_sid_mitre: meerkat_sid_mitre_map
port: 8085
preprocess:
input:
kafka:
brokers:
- localhost:9092
consumer_group: peek
topic_map: []
syslog:
udp:
port: 514
output:
kafka:
brokers:
- localhost:9092
enabled: false
topic: peek
providentia:
interval: 5m0s
oneshot: false
output:
kafka:
brokers:
- localhost:9092
enabled: false
topic: peek
token: ""
url: ""
work:
dir: /home/markus/.local/peek