From d3429ecffb9718a69087cb2d459b55b5da670bdb Mon Sep 17 00:00:00 2001
From: a3ilson <a@3ilson.com>
Date: Sun, 12 Nov 2017 12:45:56 -0500
Subject: [PATCH] Update 11-pfsense.conf
---
11-pfsense.conf | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/11-pfsense.conf b/11-pfsense.conf
index 9f2ae40..adf1895 100644
--- a/11-pfsense.conf
+++ b/11-pfsense.conf
@@ -45,8 +45,8 @@ if [prog] =~ /^filterlog$/ {
grok {
patterns_dir => "/etc/logstash/conf.d/patterns"
match => [ "message", "%{PFSENSE_LOG_DATA}%{PFSENSE_IP_SPECIFIC_DATA}%{PFSENSE_IP_DATA}%{PFSENSE_PROTOCOL_DATA}",
- "message", "%{PFSENSE_LOG_DATA}%{PFSENSE_IPv4_SPECIFIC_DATA}%{PFSENSE_IP_DATA}%{PFSENSE_PROTOCOL_DATA}",
- "message", "%{PFSENSE_LOG_DATA}%{PFSENSE_IPv6_SPECIFIC_DATA}%{PFSENSE_IP_DATA}%{PFSENSE_PROTOCOL_DATA}"]
+ "message", "%{PFSENSE_IPv4_SPECIFIC_DATA}%{PFSENSE_IP_DATA}%{PFSENSE_PROTOCOL_DATA}",
+ "message", "%{PFSENSE_IPv6_SPECIFIC_DATA}%{PFSENSE_IP_DATA}%{PFSENSE_PROTOCOL_DATA_IPv6}"]
}
mutate {
lowercase => [ 'proto' ]
--
GitLab