Closed dougburks closed 4 years ago
To test, please verify the change in 9002_output_import.conf
in both traditional Logstash mode and when running so-import-pcap
. When testing so-import-pcap
, verify that the Elasticsearch initialization still works properly with the new template name.
https://github.com/Security-Onion-Solutions/securityonion-elastic/pull/74