From 3b9050d263b729eca1c64d7e9ea2dcd0bdeee778 Mon Sep 17 00:00:00 2001
From: Andrew <a@3ilson.com>
Date: Tue, 10 Sep 2019 10:23:17 -0400
Subject: [PATCH] Update 11-pf.conf
---
11-pf.conf | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/11-pf.conf b/11-pf.conf
index 09a25d3..2e58ef2 100644
--- a/11-pf.conf
+++ b/11-pf.conf
@@ -61,7 +61,10 @@ filter {
if [prog] =~ /^openvpn/ {
mutate {
add_tag => [ "openvpn" ]
- match => [ "message", "%{OPENVPN}"
+ }
+ grok {
+ patterns_dir => ["/etc/logstash/conf.d/patterns"]
+ match => [ "message", "%{OPENVPN}"]
}
}
if [prog] =~ /^ntpd/ {
--
GitLab