Skip to content

Instantly share code, notes, and snippets.

mutate {
type => "PaloAltoTestTrafficLog"
add_field => ["SourceAddressFQDN", ""]
add_field => ["DestinationAddressFQDN", ""]
}
mutate {
type => "PaloAltoTestTrafficLog"
replace => [ "SourceAddressFQDN", "%{SourceAddress}" ]
replace => [ "DestinationAddressFQDN", "%{DestinationAddress}" ]
@timconradinc
timconradinc / gist:5279530
Created March 31, 2013 04:19 — forked from rashidkpc/gist:3794465
Fixed - changed /static to /public
LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-3.0.11/ext/apache2/mod_passenger.so
PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-3.0.11
PassengerRuby /usr/bin/ruby
<VirtualHost *:80>
ServerName logs.example.com
ServerAlias logs.example.com
DocumentRoot /home/httpd/Kibana/public
@timconradinc
timconradinc / gist:5273375
Created March 29, 2013 20:22
csv filter addition
# CSV filter. Takes an event field containing CSV data, parses it,
# and stores it as individual fields (can optionally specify the names).
#
# Example config:
# filter {
# grok {
# type => "SomeSyslogType"
# pattern => "%{SYSLOGTIMESTAMP} %{HOSTNAME} %{GREEDYDATA:csvdata}"
# }
#
@timconradinc
timconradinc / get-datastores.ps1
Created May 30, 2012 15:12
Connect to vcenter, get list of datastores
Connect-VIServer -Server vcenter.example.com -User someuser
$output = "c:\datastores.csv"
$report = @()
foreach ($ds in Get-Datastore) {
$row = "" | Select Name, FreeSpaceMB, CapacityMB
$row.FreeSpaceMB = $ds.FreeSpaceMB
$row.Name = $ds.Name
$row.CapacityMB = $ds.CapacityMB
$report += $row