Skip to content
This repository has been archived by the owner on Jan 27, 2023. It is now read-only.

Add 16 new experimental packages #181

Merged
merged 3 commits into from
Aug 4, 2020
Merged

Add 16 new experimental packages #181

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
e04519f
Add 16 new experimental packages
adriansr Jul 30, 2020
8e7f84e
Use same port numbers as Filebeat modules
adriansr Jul 30, 2020
1a09bfe
Add datastream fields to base-fields.yml and docs
adriansr Aug 4, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions packages/barracuda/0.1.0/docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,9 @@ The `waf` dataset collects Barracuda Web Application Firewall logs.
| dataset.name | Dataset name. | constant_keyword |
| dataset.namespace | Dataset namespace. | constant_keyword |
| dataset.type | Dataset type. | constant_keyword |
| datastream.dataset | Datastream dataset. | constant_keyword |
| datastream.namespace | Datastream namespace. | constant_keyword |
| datastream.type | Datastream type. | constant_keyword |
| destination.address | Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword |
| destination.bytes | Bytes sent from the destination to the source. | long |
| destination.domain | Destination domain. | keyword |
Expand Down
Loading