Skip to content

Commit

Permalink
generate config files
Browse files Browse the repository at this point in the history
[git-generate]
go run github.com/efd6/generatentconf@latest -root packages/network_traffic
  • Loading branch information
efd6 committed Apr 28, 2022
1 parent 099ed91 commit dac901b
Show file tree
Hide file tree
Showing 30 changed files with 1,703 additions and 58 deletions.
Original file line number Diff line number Diff line change
@@ -1,11 +1,51 @@
type: amqp
ports: [{{port}}]
{{#if pipeline}}
pipeline: {{pipeline}}
{{/if}}
port:
{{#each port as |p|}}
- {{p}}
{{/each}}
{{#if max_body_length}}
max_body_length: {{max_body_length}}
{{/if}}
{{#if parse_headers}}
parse_headers: {{parse_headers}}
{{/if}}
{{#if parse_arguments}}
parse_arguments: {{parse_arguments}}
{{/if}}
{{#if hide_connection_information}}
hide_connection_information: {{hide_connection_information}}
{{/if}}
{{#if send_request}}
send_request: {{send_request}}
{{/if}}
{{#if send_response}}
send_response: {{send_response}}
{{/if}}
{{#if keep_null}}
keep_null: {{keep_null}}
{{/if}}
{{#if transaction_timeout}}
transaction_timeout: {{transaction_timeout}}
{{/if}}
{{#if processors}}
processors:
{{processors}}
{{/if}}
{{#if tags}}
tags:
{{#each tags as |tag|}}
- {{tag}}
{{/each}}
{{/if}}
{{#if processes}}
procs:
enabled: true
monitored:
{{#each processes}}
- cmdline_grep: {{this}}
{{#each processes as |process|}}
- cmdline_grep: {{process}}
{{/each}}
{{/if}}
{{#if interface}}
Expand Down
95 changes: 94 additions & 1 deletion packages/network_traffic/data_stream/amqp/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,100 @@ streams:
required: true
show_user: true
default: 5672
# default: [5672]
- name: pipeline
type: text
title: Pipeline
description: Optional ingest pipeline. By default no pipeline will be used.
show_user: false
multi: false
required: false
- name: max_body_length
type: integer
title: Max Body Length
description: |-
Truncate messages that are published and avoid huge messages being
indexed.
Default: 1000
show_user: false
multi: false
required: false
- name: parse_headers
type: bool
title: Parse Headers
description: |-
Hide the header fields in header frames.
Default: false
show_user: false
multi: false
required: false
- name: parse_arguments
type: bool
title: Parse Arguments
description: |-
Hide the additional arguments of method frames.
Default: false
show_user: false
multi: false
required: false
- name: hide_connection_information
type: bool
title: Hide Connection Information
description: |-
Hide all methods relative to connection negotiation between server and
client.
Default: true
show_user: false
multi: false
required: false
- name: send_request
type: bool
title: Send Request
description: |-
If this option is enabled, the raw message of the request (`request` field)
is sent to Elasticsearch. The default is false.
show_user: false
multi: false
required: false
- name: send_response
type: bool
title: Send Response
description: |-
If this option is enabled, the raw message of the response (`response`
field) is sent to Elasticsearch. The default is false.
show_user: false
multi: false
required: false
- name: keep_null
type: bool
title: Keep Null
description: Set to true to publish fields with null values in events.
show_user: false
multi: false
required: false
- name: transaction_timeout
type: text
title: Transaction Timeout
description: |-
Transaction timeout. Expired transactions will no longer be correlated to
incoming responses, but sent to Elasticsearch immediately.
show_user: false
multi: false
required: false
- name: processors
type: yaml
title: Processors
description: Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.
show_user: false
multi: false
required: false
- name: tags
type: text
title: Tags
description: Tags to include in the published event.
show_user: false
multi: true
required: false
# default: [5672]
title: AMQP
description: Capture AMQP Traffic
template_path: amqp.yml.hbs
Original file line number Diff line number Diff line change
@@ -1,11 +1,51 @@
type: cassandra
ports: [{{port}}]
{{#if pipeline}}
pipeline: {{pipeline}}
{{/if}}
port:
{{#each port as |p|}}
- {{p}}
{{/each}}
{{#if send_request}}
send_request: {{send_request}}
{{/if}}
{{#if send_request_header}}
send_request_header: {{send_request_header}}
{{/if}}
{{#if send_response}}
send_response: {{send_response}}
{{/if}}
{{#if send_response_header}}
send_response_header: {{send_response_header}}
{{/if}}
{{#if keep_null}}
keep_null: {{keep_null}}
{{/if}}
{{#if compressor}}
compressor: {{compressor}}
{{/if}}
{{#if ignored_ops}}
ignored_ops:
{{#each ignored_ops as |ignored_op|}}
- {{ignored_op}}
{{/each}}
{{/if}}
{{#if processors}}
processors:
{{processors}}
{{/if}}
{{#if tags}}
tags:
{{#each tags as |tag|}}
- {{tag}}
{{/each}}
{{/if}}
{{#if processes}}
procs:
enabled: true
monitored:
{{#each processes}}
- cmdline_grep: {{this}}
{{#each processes as |process|}}
- cmdline_grep: {{process}}
{{/each}}
{{/if}}
{{#if interface}}
Expand Down
82 changes: 81 additions & 1 deletion packages/network_traffic/data_stream/cassandra/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,87 @@ streams:
# multi: true
show_user: true
default: 9042
# default: [9042]
- name: pipeline
type: text
title: Pipeline
description: Optional ingest pipeline. By default no pipeline will be used.
show_user: false
multi: false
required: false
- name: send_request
type: bool
title: Send Request
description: |-
If this option is enabled, the raw message of the request (`cassandra_request` field)
is included in published events. The default is true.
show_user: false
multi: false
required: false
- name: send_request_header
type: bool
title: Send Request Header
description: |-
If this option is enabled, the raw message of the response (`cassandra_request.request_headers` field)
is included in published events. The default is true. enable `send_request` first before enable this option.
show_user: false
multi: false
required: false
- name: send_response
type: bool
title: Send Response
description: |-
If this option is enabled, the raw message of the response (`cassandra_response` field)
is included in published events. The default is true.
show_user: false
multi: false
required: false
- name: send_response_header
type: bool
title: Send Response Header
description: |-
If this option is enabled, the raw message of the response (`cassandra_response.response_headers` field)
is included in published events. The default is true. enable `send_response` first before enable this option.
show_user: false
multi: false
required: false
- name: keep_null
type: bool
title: Keep Null
description: Set to true to publish fields with null values in events.
show_user: false
multi: false
required: false
- name: compressor
type: text
title: Compressor
description: |-
Configures the default compression algorithm being used to uncompress compressed frames by name. Currently only `snappy` is can be configured.
By default no compressor is configured.
show_user: false
multi: false
required: false
- name: ignored_ops
type: text
title: Ignored Ops
description: This option indicates which Operator/Operators will be ignored.
show_user: false
multi: true
required: false
- name: processors
type: yaml
title: Processors
description: Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.
show_user: false
multi: false
required: false
- name: tags
type: text
title: Tags
description: Tags to include in the published event.
show_user: false
multi: true
required: false
# default: [9042]
title: Cassandra
description: Capture Cassandra Traffic
template_path: cassandra.yml.hbs
Original file line number Diff line number Diff line change
@@ -1,11 +1,30 @@
type: dhcpv4
ports: [{{port}}]
{{#if pipeline}}
pipeline: {{pipeline}}
{{/if}}
port:
{{#each port as |p|}}
- {{p}}
{{/each}}
{{#if keep_null}}
keep_null: {{keep_null}}
{{/if}}
{{#if processors}}
processors:
{{processors}}
{{/if}}
{{#if tags}}
tags:
{{#each tags as |tag|}}
- {{tag}}
{{/each}}
{{/if}}
{{#if processes}}
procs:
enabled: true
monitored:
{{#each processes}}
- cmdline_grep: {{this}}
{{#each processes as |process|}}
- cmdline_grep: {{process}}
{{/each}}
{{/if}}
{{#if interface}}
Expand Down
30 changes: 29 additions & 1 deletion packages/network_traffic/data_stream/dhcpv4/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,35 @@ streams:
required: true
show_user: true
default: 67
# default: [67, 68]
- name: pipeline
type: text
title: Pipeline
description: Optional ingest pipeline. By default no pipeline will be used.
show_user: false
multi: false
required: false
- name: keep_null
type: bool
title: Keep Null
description: Set to true to publish fields with null values in events.
show_user: false
multi: false
required: false
- name: processors
type: yaml
title: Processors
description: Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.
show_user: false
multi: false
required: false
- name: tags
type: text
title: Tags
description: Tags to include in the published event.
show_user: false
multi: true
required: false
# default: [67, 68]
title: DHCP
description: Capture DHCP Traffic
template_path: dhcpv4.yml.hbs
Loading

0 comments on commit dac901b

Please sign in to comment.