This is the start of a pack for handling Hashicorp. It is not intended to be released, nor used in production.
The pack assumes a sourcetype field with either vault or consul in the value somewhere.
- Install the pack
- Adjust the optional rules as required
- Use Routes or Quick Connect to send data to the Pack
Added the routes to look for sourcetype
Initial non-release release. Use with caution.
I welcome contributions! Please contact jon@cribl.io with suggestions, updates and fixes.
Jon Rust jon@cribl.io
This Pack uses the following license: Apache 2.0