Skip to content

Commit

Permalink
[filtermod] Correct location of cef template (#640)
Browse files Browse the repository at this point in the history
  • Loading branch information
Ryan Faircloth authored and GitHub committed Aug 17, 2020
1 parent f6ed963 commit cdb3ee2
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 8 deletions.
8 changes: 0 additions & 8 deletions package/etc/conf.d/conflib/_common/templates.conf
Original file line number Diff line number Diff line change
Expand Up @@ -34,14 +34,6 @@ template t_everything {
template("${ISODATE} ${HOST} ${LEGACY_MSGHDR}${MESSAGE}");
};

# ===============================================================================================
# CEF Header with message; useful for common event format (CEF)
# ===============================================================================================

template t_cef_hdr_msg {
template("$(strip $MESSAGE )");
};

# ===============================================================================================
# Message Header with Message; for Palo Alto
# ===============================================================================================
Expand Down
8 changes: 8 additions & 0 deletions package/etc/conf.d/log_paths/lp-common_event_format.conf.tmpl
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,14 @@ parser p_cef_class {
);
};

# ===============================================================================================
# CEF Header with message; useful for common event format (CEF)
# ===============================================================================================

template t_cef_hdr_msg {
template("$(strip $MESSAGE )");
};

log {
junction {
{{- if or (or (getenv (print "SC4S_LISTEN_CEF_TCP_PORT")) (getenv (print "SC4S_LISTEN_CEF_UDP_PORT"))) (getenv (print "SC4S_LISTEN_CEF_TLS_PORT")) }}
Expand Down

0 comments on commit cdb3ee2

Please sign in to comment.