From c34c54c3da4ff97cd7bff7e2164431e22ec1ea69 Mon Sep 17 00:00:00 2001 From: a3ilson <a@3ilson.com> Date: Sun, 5 Nov 2017 06:50:09 -0500 Subject: [PATCH] Update 10-syslog(test).conf --- 10-syslog(test).conf | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/10-syslog(test).conf b/10-syslog(test).conf index ecbf354..46f8213 100644 --- a/10-syslog(test).conf +++ b/10-syslog(test).conf @@ -1,18 +1,17 @@ filter { if [type] == "syslog" { - #for multiple pfSense - #if [host] => ["192.168.0.1", "192.168.50.1", "192.168.100.1"] #change to pfSense ip address if [host] =~ /192\.168\.1\.1/ { mutate { add_tag => ["PFSense", "Ready"] } } - #if [host] =~ /192\.168\.100\.1/ { - # mutate { - # add_tag => ["PFSense#2", "Ready"] - # } - #} +#For Multiple pfSense's, use the following, repeat as needed +# if [host] =~ /192\.168\.100\.1/ { +# mutate { +# add_tag => ["PFSense", "Ready"] +# } +# } if "Ready" not in [tags] { mutate { add_tag => [ "syslog" ] -- GitLab