logstash-docker Arcsight module

docker-compose.yml

---
version: '2'
services:
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:${TAG}
    environment: ['http.host=0.0.0.0', 'transport.host=127.0.0.1']
    ports: ['127.0.0.1:9200:9200']
    networks: ['stack']

  kibana:
    image: docker.elastic.co/kibana/kibana:${TAG}
    ports: ['127.0.0.1:5601:5601']
    networks: ['stack']
    depends_on: ['elasticsearch']

  logstash:
    image: docker.elastic.co/logstash/logstash:${TAG}
    networks: ['stack']
    depends_on: ['elasticsearch', 'kibana']
    command: >
      logstash --modules arcsight --setup
      -M "arcsight.var.inputs=smartconnector"
      -M "arcsight.var.elasticsearch.hosts=elasticsearch:9200"
      -M "arcsight.var.elasticsearch.username=elastic"
      -M "arcsight.var.elasticsearch.password=changeme"
      -M "arcsight.var.kibana.host=kibana:5601"
      -M "arcsight.var.kibana.username=elastic"
      -M "arcsight.var.kibana.password=changeme"