Skip to content

Instantly share code, notes, and snippets.

View bzed's full-sized avatar
🇦🇹

Bernd Zeimetz bzed

🇦🇹
  • conova communications GmbH
  • Salzburg
  • 10:58 (UTC +02:00)
View GitHub Profile
@bzed
bzed / pfsense.grok
Created March 10, 2015 22:23
Logstash pfsense pattern
# GROK match pattern for logstash.conf filter: %{PFSENSE_LOG_DATA}%{PFSENSE_IP_SPECIFIC_DATA}%{PFSENSE_IP_DATA}%{PFSENSE_PROTOCOL_DATA}
# GROK Custom Patterns (add to patterns directory and reference in GROK filter for pfSense events):
# GROK Patterns for pfSense 2.2 Logging Format
#
# Created 27 Jan 2015 by J. Pisano (Handles TCP, UDP, and ICMP log entries)
# Edited 14 Feb 2015 by E. Paul
# Edited 10 Mar 2015 by Bernd Zeimetz <bernd@bzed.de>
# taken from https://gist.github.com/elijahpaul/f5f32d4e914dcb7fedd2