From 6141d64a6fc3b62a4bcc4d4c72f0d48ab81dae50 Mon Sep 17 00:00:00 2001
From: nin9s <strrrn@gmail.com>
Date: Sun, 12 May 2019 20:26:50 +0200
Subject: [PATCH] Update 20-dns-syslog.conf

added regex grok filter
---
 logstash/conf.d/20-dns-syslog.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/logstash/conf.d/20-dns-syslog.conf b/logstash/conf.d/20-dns-syslog.conf
index 1081c64..fe06c07 100644
--- a/logstash/conf.d/20-dns-syslog.conf
+++ b/logstash/conf.d/20-dns-syslog.conf
@@ -34,6 +34,8 @@ filter {
  "^%{DNSMASQPREFIX} \/etc\/pihole\/local\.list %{FQDN:blocked_domain} is %{IP:pihole}$",
  # blacklist
  "^%{DNSMASQPREFIX} \/etc\/pihole\/black\.list %{FQDN:blocked_domain} is %{IP:pihole}$",
+ # regex
+ "^%{DNSMASQPREFIX} \/etc\/pihole\/regex\.list %{FQDN:blocked_domain} is %{IP:pihole}$",
  # reverse response etc hosts ip to domain
  "^%{DNSMASQPREFIX} \/etc\/hosts %{IP:ip_request} is %{FQDN:domain_response}$",
  # reverse response etc hosts domain to ip
-- 
GitLab