mirror of
https://github.com/elastic/logstash.git
synced 2025-04-24 06:37:19 -04:00
parent
3a08171c3a
commit
3845b03def
2 changed files with 17 additions and 14 deletions
22
docs/static/arcsight-module.asciidoc
vendored
22
docs/static/arcsight-module.asciidoc
vendored
|
@ -66,14 +66,14 @@ includes the Logstash ArcSight module.
|
|||
. Start the Logstash ArcSight module by running the following command in the
|
||||
Logstash install directory with your respective EB host and port:
|
||||
+
|
||||
[source,shell]
|
||||
["source","shell",subs="attributes"]
|
||||
-----
|
||||
bin/logstash --modules arcsight --setup
|
||||
-M "arcsight.var.inputs=smartconnector"
|
||||
-M "arcsight.var.elasticsearch.username=elastic"
|
||||
-M "arcsight.var.elasticsearch.password=changeme"
|
||||
-M "arcsight.var.elasticsearch.password={pwd}"
|
||||
-M "arcsight.var.kibana.username=elastic"
|
||||
-M "arcsight.var.kibana.password=changeme"
|
||||
-M "arcsight.var.kibana.password={pwd}"
|
||||
-----
|
||||
+
|
||||
--
|
||||
|
@ -90,7 +90,7 @@ dashboards.
|
|||
|
||||
. Explore your data with Kibana:
|
||||
.. Open browser @ http://localhost:5601[http://localhost:5601] (username:
|
||||
"elastic"; password: "changeme")
|
||||
"elastic"; password: "{pwd}")
|
||||
.. Open the *[ArcSight] Network Overview Dashboard*
|
||||
.. See <<exploring-data-arcsight>> for additional details on data exploration.
|
||||
|
||||
|
@ -142,14 +142,14 @@ bin/logstash-plugin install --version 6.2.7 logstash-input-kafka
|
|||
. Start the Logstash ArcSight module by running the following command in the
|
||||
Logstash install directory with your respective EB host and port:
|
||||
+
|
||||
[source,shell]
|
||||
["source","shell",subs="attributes"]
|
||||
-----
|
||||
bin/logstash --modules arcsight --setup
|
||||
-M "arcsight.var.input.eventbroker.bootstrap_servers={eb_host}:{eb_port}"
|
||||
-M "arcsight.var.elasticsearch.username=elastic"
|
||||
-M "arcsight.var.elasticsearch.password=changeme"
|
||||
-M "arcsight.var.elasticsearch.password={pwd}"
|
||||
-M "arcsight.var.kibana.username=elastic"
|
||||
-M "arcsight.var.kibana.password=changeme"
|
||||
-M "arcsight.var.kibana.password={pwd}"
|
||||
-----
|
||||
+
|
||||
--
|
||||
|
@ -166,7 +166,7 @@ dashboards.
|
|||
|
||||
. Explore your data with Kibana:
|
||||
.. Open browser @ http://localhost:5601[http://localhost:5601] (username:
|
||||
"elastic"; password: "changeme")
|
||||
"elastic"; password: "{pwd}")
|
||||
.. Open the *[ArcSight] Network Overview Dashboard*
|
||||
.. See <<exploring-data-arcsight>> for additional details on data exploration.
|
||||
|
||||
|
@ -233,7 +233,7 @@ like in the getting started. For more information about configuring modules, see
|
|||
As an example, the following settings can be appended to `logstash.yml` to
|
||||
configure your module:
|
||||
|
||||
[source,yaml]
|
||||
["source","yaml",subs="attributes"]
|
||||
-----
|
||||
modules:
|
||||
- name: arcsight
|
||||
|
@ -241,10 +241,10 @@ modules:
|
|||
var.input.eventbroker.topics: "eb_topic"
|
||||
var.elasticsearch.hosts: "localhost:9200"
|
||||
var.elasticsearch.username: "elastic"
|
||||
var.elasticsearch.password: "changeme"
|
||||
var.elasticsearch.password: "{pwd}"
|
||||
var.kibana.host: “localhost:5601”
|
||||
var.kibana.username: "elastic"
|
||||
var.kibana.password: "changeme"
|
||||
var.kibana.password: "{pwd}"
|
||||
-----
|
||||
|
||||
[[arcsight-module-config]]
|
||||
|
|
9
docs/static/modules.asciidoc
vendored
9
docs/static/modules.asciidoc
vendored
|
@ -173,16 +173,19 @@ Example:
|
|||
|
||||
These settings can be specified in the `logstash.yml` <<logstash-settings-file,settings file>>.
|
||||
They should be added separately from any module configuration settings you may have added before.
|
||||
[source,yaml]
|
||||
|
||||
["source","yaml",subs="attributes"]
|
||||
----
|
||||
# example with a label
|
||||
cloud.id: "staging:dXMtZWFzdC0xLmF3cy5mb3VuZC5pbyRub3RhcmVhbCRpZGVudGlmaWVy"
|
||||
cloud.auth: "elastic:changeme"
|
||||
cloud.auth: "elastic:{pwd}"
|
||||
----
|
||||
|
||||
["source","yaml",subs="attributes"]
|
||||
----
|
||||
# example without a label
|
||||
cloud.id: "dXMtZWFzdC0xLmF3cy5mb3VuZC5pbyRub3RhcmVhbCRpZGVudGlmaWVy"
|
||||
cloud.auth: "elastic:changeme"
|
||||
cloud.auth: "elastic:{pwd}"
|
||||
----
|
||||
|
||||
These settings can be also specified at the command line, like this:
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue