reyjrar

##################################################################
# /etc/elasticsearch/elasticsearch.yml
#
# Base configuration for a write heavy cluster
#

# Cluster / Node Basics
cluster.name: logng

# Node can have abritrary attributes we can use for routing

reyjrar

#=======================================
# Part 1 is Setting up the Mirror Server

# Install CPAN::Mini
$ curl -L http://cpanmin.us | perl - --sudo CPAN::Mini

# Select a CPAN Mirror URL from http://mirrors.cpan.org/
#   - We'll use http://cpan.pair.com
# Pick a directory to mirror to, I'll use /var/www/cpan

reyjrar

(* 
 * New-iTerm-Window.scpt
 * 
 * Intended for use with QuickSilver
 *  I mapped option-y to running this script to create
 *  a new iTerm window on the current workspace
 *
 * Based on much Googling - very little "original" code here
 *   Comments/Suggestions to brad.lhotsky@gmail.com
 *)

reyjrar

PLAY [localhost] ***************************************************************************************************************************

TASK [Gathering Facts] *********************************************************************************************************************
ok: [localhost]

TASK [Running for first] *******************************************************************************************************************

TASK [bar : debug] *************************************************************************************************************************
ok: [localhost] => {
    "msg": "var_bar is second"

reyjrar

---
- name: "Set a global variable mid-playbook run"
  run_once: true
  set_fact:
    "{{ global_name }}": "{{ global_value }}"
  delegate_to: "{{ _all__hostname }}"
  loop: "{{ groups['all'] }}"
  loop_control:
    loop_var: "_all__hostname"
  

reyjrar

#!/bin/bash

# Install perlbrew
curl -L https://install.perlbrew.pl | bash

# Setup perlbrew
perlbrew install -j8 -n 5.30.0
perlbrew switch 5.30.0
perlbrew install-cpanm

reyjrar

---
host: localhost
port: 9200
base: syslog
days: 1
timestamp: '@timestamp'

reyjrar

---
host: localhost
port: 9200
base: syslog
days: 1
meta:
  access:
    timestamp: timestamp
  ossec:
    timestamp: ts

reyjrar

{
    "template": "logstash-*",
    "settings" : {
        "index.number_of_shards" : 3,
        "index.number_of_replicas" : 1,
        "index.query.default_field" : "@message",
        "index.routing.allocation.total_shards_per_node" : 2,
        "index.auto_expand_replicas": false
    },
    "mappings": {

reyjrar

diff --git a/etc/decoder.xml b/etc/decoder.xml
index a7846ad..1087918 100755
--- a/etc/decoder.xml
+++ b/etc/decoder.xml
@@ -1841,6 +1841,7 @@
 </decoder>
 
 <!-- decoder for active responses as logged by an OSSEC agent or server
+
 - Examples