From a726d402d4b402a76c6f671f226f87413c45236d Mon Sep 17 00:00:00 2001
From: 9S <strrrn@gmail.com>
Date: Thu, 19 Sep 2019 08:31:46 +0200
Subject: [PATCH] Update README.md
---
README.md | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/README.md b/README.md
index 8c418eb..b4bddf3 100644
--- a/README.md
+++ b/README.md
@@ -42,6 +42,7 @@ This makes sure that /conf.d/20-dns-syslog.conf is beeing processed at the begin
2. customize "ELASTICSEARCHHOST:PORT" in the output section at the bottom of the file
3. copy "dns" to "/etc/logstash/patterns/"
+
4. restart logstash
### PI-HOLE
@@ -59,9 +60,13 @@ This makes sure that /conf.d/20-dns-syslog.conf is beeing processed at the begin
13. delete any existing template matching our index name: DELETE /_template/logstash-syslog-dns*
14. import the template: paste the content of "logstash-syslog-dns-index.template_ELK7.x.json" into kibanas dev tools console
14.1 click the green triangle in the upper right of the pasted content (first line). Output should be:
+
{
+
"acknowledged" : true
+
}
+
15. optionally reload kibanas field list via: Management -> Index patterns -> type logstash-syslog-dns*
15. click the curved arrows on the top left
--
GitLab