ini logstash_syslog_shipper.conf

Posted 2021-05-24

input {
  syslog = {
    type => syslog
    port => 514
  }
}
filter {
  grok {
   type => "auditd"
   pattern => [" AUDIT type=%{WORD:audit_type} msg=audit\(%{NUMBER:audit_epoch}:%{NUMBER:audit_coun
              ter}\): user pid=%{NUMBER:audit_pid} uid=%{NUMBER:audit_uid} auid=%{NUMBER:audit_audid} subj=%{WORD
              :audit_subject} msg=%{GREEDYDATA:audit_message}"]
   pattern => [" AUDITLOGIN type=%{WORD:audit_type} msg=audit\(%{NUMBER:audit_epoch}:%{NUMBER:audit
                _counter}\): login pid=%{NUMBER:audit_pid} uid=%{NUMBER:audit_uid} old auid=%{NUMBER:old_auid}
                new auid=%{NUMBER:new_auid} old ses=%{NUMBER:old_ses} new ses=%{NUMBER:new_ses}"]
  }
}
output {
  stdout { 
    codec => rubydebug
    debug => true
  }

  elasticsearch {
    embedded => true
  }
}

ini php.ini中

; загрузка файлов
file_uploads = On
max_file_uploads = 500
post_max_size = 150M
upload_max_filesize = 150M

; http://ru.stealthsettings.com/importa-baze-de-date-mari-sql-schimband-marimea-limita-de-upload-2048-kib-din-phpmyadmin.html