Skip to content

Commit

Permalink
[Filebeat] Update MISP module config file (elastic#15261) (elastic#15333
Browse files Browse the repository at this point in the history
)

* Update misp module config file

* Change URI to URL

(cherry picked from commit 8560d82)
  • Loading branch information
kaiyan-sheng committed Jan 7, 2020
1 parent 7b22e21 commit e92a2b4
Show file tree
Hide file tree
Showing 5 changed files with 26 additions and 2 deletions.
2 changes: 1 addition & 1 deletion filebeat/docs/modules/misp.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ The configuration in the config.yml file uses the following format:

* var.api_key: specifies the API key to access MISP.
* var.json_objects_array: specifies the array object in MISP response, e.g., "response.Attribute".
* var.url: URI of the MISP REST API, e.g., "http://x.x.x.x/attributes/restSearch"
* var.url: URL of the MISP REST API, e.g., "http://x.x.x.x/attributes/restSearch"

[float]
=== Example dashboard
Expand Down
8 changes: 8 additions & 0 deletions x-pack/filebeat/filebeat.reference.yml
Original file line number Diff line number Diff line change
Expand Up @@ -408,6 +408,14 @@ filebeat.modules:
- module: misp
threat:
enabled: true
# API key to access MISP
#var.api_key

# Array object in MISP response
#var.json_objects_array

# URL of the MISP REST API
#var.url

#------------------------------- Mongodb Module -------------------------------
#- module: mongodb
Expand Down
8 changes: 8 additions & 0 deletions x-pack/filebeat/module/misp/_meta/config.yml
Original file line number Diff line number Diff line change
@@ -1,3 +1,11 @@
- module: misp
threat:
enabled: true
# API key to access MISP
#var.api_key

# Array object in MISP response
#var.json_objects_array

# URL of the MISP REST API
#var.url
2 changes: 1 addition & 1 deletion x-pack/filebeat/module/misp/_meta/docs.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ The configuration in the config.yml file uses the following format:

* var.api_key: specifies the API key to access MISP.
* var.json_objects_array: specifies the array object in MISP response, e.g., "response.Attribute".
* var.url: URI of the MISP REST API, e.g., "http://x.x.x.x/attributes/restSearch"
* var.url: URL of the MISP REST API, e.g., "http://x.x.x.x/attributes/restSearch"

[float]
=== Example dashboard
Expand Down
8 changes: 8 additions & 0 deletions x-pack/filebeat/modules.d/misp.yml.disabled
Original file line number Diff line number Diff line change
Expand Up @@ -4,3 +4,11 @@
- module: misp
threat:
enabled: true
# API key to access MISP
#var.api_key

# Array object in MISP response
#var.json_objects_array

# URL of the MISP REST API
#var.url

0 comments on commit e92a2b4

Please sign in to comment.