Cargill / OpenSIEM-Logstash-Parsing

SIEM Logstash parsing for more than hundred technologies

Add fields in all configs to enable coverage report

KrishnanandSingh opened this issue 3 years ago · comments

Krishnanand Singh commented 3 years ago

User Story - details

If every parsing config has log.source.hostname field and event.dataset then from elastic/kibana we can create coverage report per host.

Tasks

[ ]
[ ]

X-Reference Issues

Related Code

<< Any related code here... >>

Erin Verbeck commented 3 years ago

This issue has been resolved by adding kafka.topic and event.module to all configurations. Closing! Thanks, Krishna.