PaloAltoNetworks / minemeld

Main MineMeld documentation repo
380 stars 64 forks source link

save IOC from minemeld as file #34

Open HKcyberstark opened 5 years ago

HKcyberstark commented 5 years ago

Hello Team,

Can some one help me with Logstash output documentation. I need to save the IOC collected from minemeld into either JSON or CSV or YAML file so that the file can be used by Logstash using translate filter for comparing with elasticsearch data.

So i tried Logstash output to collect the TCP input from minemeld and save it as file. but my logstash output node in minemeld is with zero indicators though my aggregator has so many indicators.

kindly help me if there is any other way to save IOC from minemeld as file.

I tried this logstash config but no success. dont know what i am missing. I might be missing something from minemeld or logstash end. kind help is much appreciated.

logstash configuration:

input { tcp { port => 5514 } }

output { file { path =>/etc/logstash/minemeld-output.txt } }