DEFCON Logstash UDP Plugin
Prerequisits
Installation
cd $DEFCON_INSTALL_DIR
npm install defcon-logstash-udp
- Enable and configure 'defcon-logstash-udp' in your DEFCON configuration file, e.g.
- Restart defcon (you can do this via
kill -s USRSIG2 <pid>
if you want zero downtime)
Configuration
The plugin configuration options are only host, port and protocol (which can be either 'udp4' or 'udp6'). A basic logstash configuration is as follows:-
input { udp { port => 9999 codec => json }}output { stdout { codec => json }}