Updated S3 API Audit log (markdown)

Konstantin Lebedev 2021-12-14 18:45:41 +05:00
parent 244d9d4ea7
commit e43140f67c

@ -33,7 +33,7 @@
logstash.conf: logstash.conf:
``` ```
filter { filter {
if [tags][0] and [tags][0] =~ /s3.access/ { if [tags][0] and [tags][0] =~ /s3.access/ {
ruby { ruby {
code => 'event.set("environment", ((event.get("tags").first).split(".")).first)' code => 'event.set("environment", ((event.get("tags").first).split(".")).first)'
@ -46,14 +46,14 @@ logstash.conf:
replace => { "environment" => "unknown" } replace => { "environment" => "unknown" }
} }
} }
} }
input { input {
tcp { tcp {
codec => fluent codec => fluent
port => 24224 port => 24224
} }
} }
output { output {
if [@metadata][input_type] == "s3.access" { if [@metadata][input_type] == "s3.access" {
clickhouse { clickhouse {
headers => ["Authorization", "Basic ${CLICKHOUSE_BASIC_AUTH}"] headers => ["Authorization", "Basic ${CLICKHOUSE_BASIC_AUTH}"]
@ -72,7 +72,7 @@ logstash.conf:
id => "clickhouse" id => "clickhouse"
} }
} }
} }
``` ```