Filebeat specifically made for reading Bro data
94
version: '2' services: brobeat: image: "fuzzybunny/brobeat:bluefin" network_mode: "host" restart: "always" volumes: - "/data/bro:/var/log/bro" environment: - 'ELASTICSEARCH_URLS=["dockervm_3c1a.dmss:9202", "dockervm_3c1a.dmss:9203", "dockervm_3c1a.dmss:9204", "dockervm_3c1a.dmss:9205"]' - "SPOOL_SIZE=4000" - "WORKERS=1" - "BULK_MAX_SIZE=1000" - "PERIOD=10s"
[Unit] Description = CVAH Bro-Beat Service Module
Wants = network.target broctl.service Requires = docker.service PartOf = cvah.sensor.service
[Service] Type = simple
ExecStart = /usr/bin/docker-compose -p cvah -f /operator/dip/compose_files/cvah.bro-beat.compose.yml up ExecStop = /usr/bin/docker-compose -p cvah -f /operator/dip/compose_files/cvah.bro-beat.compose.yml down
Restart=always RestartSec=3
[Install] WantedBy = multi-user.target
Content type
Image
Digest
Size
105 MB
Last updated
over 8 years ago
docker pull fuzzybunny/brobeat:bluefin