Browse Source

add back in postfix geoip processing

master
Zane C. B-H 3 months ago
parent
commit
48e360c825
  1. 10
      MANIFEST
  2. 7
      logstash/conf.d/50-filter-postfix.conf

10
MANIFEST

@ -17,6 +17,10 @@ t/manifest.t
t/pod-coverage.t
t/pod.t
bin/essearcher
logstash/postfix/50-filter-postfix.conf
logstash/postfix/README.md
logstash/postfix/postfix.grok
logstash/patterns.d/postfix.grok
logstash/conf.d/50-filter-postfix.conf
logstash/conf.d/syslog.conf
logstash/conf.d/rsyslog.conf
logstash/conf.d/beats.conf
logstash/conf.d/51-filter-postfix-aggregate.conf.off
logstash/README.md

7
logstash/conf.d/50-filter-postfix.conf

@ -262,5 +262,12 @@ filter {
"postfix_postscreen_violation_time", "float"
]
}
# add geoip for postfix
if [program] =~ /.*postfix.*/ {
geoip {
source => "postfix_client_ip"
}
}
}

Loading…
Cancel
Save