Sign inSign up

fuzzybunny/brobeat

By fuzzybunny

•Updated over 8 years ago

Filebeat specifically made for reading Bro data

Image
1

94

fuzzybunny/brobeat repository overview

⁠brobeat.compose.yml:

version: '2' services: brobeat: image: "fuzzybunny/brobeat:bluefin" network_mode: "host" restart: "always" volumes: - "/data/bro:/var/log/bro" environment: - 'ELASTICSEARCH_URLS=["dockervm_3c1a.dmss:9202", "dockervm_3c1a.dmss:9203", "dockervm_3c1a.dmss:9204", "dockervm_3c1a.dmss:9205"]' - "SPOOL_SIZE=4000" - "WORKERS=1" - "BULK_MAX_SIZE=1000" - "PERIOD=10s"

⁠brobeat.service:

[Unit] Description = CVAH Bro-Beat Service Module

Wants = network.target broctl.service Requires = docker.service PartOf = cvah.sensor.service

[Service] Type = simple

ExecStart = /usr/bin/docker-compose -p cvah -f /operator/dip/compose_files/cvah.bro-beat.compose.yml up ExecStop = /usr/bin/docker-compose -p cvah -f /operator/dip/compose_files/cvah.bro-beat.compose.yml down

Restart=always RestartSec=3

[Install] WantedBy = multi-user.target

Tag summary

Content type

Image

Digest

Size

105 MB

Last updated

over 8 years ago

docker pull fuzzybunny/brobeat:bluefin