Sha256: bbb89fb7d275b37612393ddbe8e1bf65564fb28e020c7cd5fe7ce2c56a457d96
Contents?: true
Size: 684 Bytes
Versions: 7
Compression:
Stored size: 684 Bytes
Contents
{%- if application_attributes is defined and "cloudtrail_sources" in application_attributes: %}
{% for trail in application_attributes["cloudtrail_sources"]: %}
input {
s3 {
bucket => "{{ trail['bucket'] }}"
prefix => "AWSLogs/"
codec => cloudtrail {}
ecs_compatibility => v1
id => "cloudtrail{{ trail['tag'] }}"
{% if "role_arn" in trail %}
role_arn => "{{ trail["role_arn"] }}"
{% endif %}
tags => ["AWS", "cloudtrail", "{{ trail['tag'] }}"]
type => "cloudtrail"
}
}
{%- endfor %}
{%- endif %}
filter {
if [type] == "cloudtrail" {
geoip {
source => "sourceIPAddress"
ecs_compatibility => v1
target => "geoip"
}
}
}
Version data entries
7 entries across 7 versions & 1 rubygems