From 6141d64a6fc3b62a4bcc4d4c72f0d48ab81dae50 Mon Sep 17 00:00:00 2001 From: nin9s <strrrn@gmail.com> Date: Sun, 12 May 2019 20:26:50 +0200 Subject: [PATCH] Update 20-dns-syslog.conf added regex grok filter --- logstash/conf.d/20-dns-syslog.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/logstash/conf.d/20-dns-syslog.conf b/logstash/conf.d/20-dns-syslog.conf index 1081c64..fe06c07 100644 --- a/logstash/conf.d/20-dns-syslog.conf +++ b/logstash/conf.d/20-dns-syslog.conf @@ -34,6 +34,8 @@ filter { "^%{DNSMASQPREFIX} \/etc\/pihole\/local\.list %{FQDN:blocked_domain} is %{IP:pihole}$", # blacklist "^%{DNSMASQPREFIX} \/etc\/pihole\/black\.list %{FQDN:blocked_domain} is %{IP:pihole}$", + # regex + "^%{DNSMASQPREFIX} \/etc\/pihole\/regex\.list %{FQDN:blocked_domain} is %{IP:pihole}$", # reverse response etc hosts ip to domain "^%{DNSMASQPREFIX} \/etc\/hosts %{IP:ip_request} is %{FQDN:domain_response}$", # reverse response etc hosts domain to ip -- GitLab