Update content pack

This commit is contained in:
Brendan Smith 2021-11-19 16:38:13 -06:00
parent bab7ba7f53
commit 82a5bf466b

View file

@ -1,21 +1,302 @@
{
"v": "1",
"id": "c042429f-1f13-43b8-9d78-d29f267b3ae9",
"v": 1,
"id": "2a49dff2-b925-4708-8fb4-9afba67640a9",
"rev": 1,
"name": "OPNsense Dashboard",
"summary": "This pack includes everything needed to setup Graylog for the dashboard.",
"description": "",
"vendor": "Bsmith101",
"url": "https://github.com/Bsmith101/OPNsense-Dashboard",
"vendor": "BSmithIO",
"url": "https://github.com/BSmithIO/OPNsense-Dashboard",
"parameters": [],
"entities": [
{
"v": "1",
"type": {
"name": "lookup_cache",
"version": "1"
},
"id": "79d432a2-a390-4450-b7ca-7ba16eebffe6",
"data": {
"name": {
"@type": "string",
"@value": "geoip"
},
"title": {
"@type": "string",
"@value": "GeoIP"
},
"description": {
"@type": "string",
"@value": "GeoIP Cache"
},
"configuration": {
"type": {
"@type": "string",
"@value": "guava_cache"
},
"max_size": {
"@type": "integer",
"@value": 1000
},
"expire_after_access": {
"@type": "long",
"@value": 1
},
"expire_after_access_unit": {
"@type": "string",
"@value": "SECONDS"
},
"expire_after_write": {
"@type": "long",
"@value": 0
}
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "stream",
"version": "1"
},
"id": "d060729f-292b-4894-af6a-ed2f1c258e08",
"data": {
"alarm_callbacks": [],
"outputs": [],
"remove_matches": {
"@type": "boolean",
"@value": true
},
"title": {
"@type": "string",
"@value": "OPNsense / filterlog"
},
"stream_rules": [
{
"type": {
"@type": "string",
"@value": "CONTAINS"
},
"field": {
"@type": "string",
"@value": "message"
},
"value": {
"@type": "string",
"@value": "filterlog"
},
"inverted": {
"@type": "boolean",
"@value": false
},
"description": {
"@type": "string",
"@value": ""
}
}
],
"alert_conditions": [],
"matching_type": {
"@type": "string",
"@value": "AND"
},
"disabled": {
"@type": "boolean",
"@value": false
},
"description": {
"@type": "string",
"@value": "OPNsense filter logs"
},
"default_stream": {
"@type": "boolean",
"@value": false
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "pipeline",
"version": "1"
},
"id": "fda2128d-4140-47b4-915a-889349953b12",
"data": {
"title": {
"@type": "string",
"@value": "GeoIP"
},
"description": {
"@type": "string",
"@value": "GeoIP"
},
"source": {
"@type": "string",
"@value": "pipeline \"GeoIP\"\nstage 0 match either\nrule \"GeoIP lookup: src_ip\"\nend"
},
"connected_streams": [
{
"@type": "string",
"@value": "d060729f-292b-4894-af6a-ed2f1c258e08"
}
]
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "lookup_adapter",
"version": "1"
},
"id": "db9a5df6-9e1a-4d37-ad73-16a8dd08b5fa",
"data": {
"name": {
"@type": "string",
"@value": "geoip"
},
"title": {
"@type": "string",
"@value": "GeoIP"
},
"description": {
"@type": "string",
"@value": "Geo IP Lookup Table"
},
"configuration": {
"type": {
"@type": "string",
"@value": "maxmind_geoip"
},
"path": {
"@type": "string",
"@value": "/usr/share/graylog/data/data/GeoLite2-Country.mmdb"
},
"database_type": {
"@type": "string",
"@value": "MAXMIND_COUNTRY"
},
"check_interval": {
"@type": "long",
"@value": 1
},
"check_interval_unit": {
"@type": "string",
"@value": "MINUTES"
}
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "pipeline_rule",
"version": "1"
},
"id": "6bbba4f4-256f-4478-abf4-8034001c5237",
"data": {
"title": {
"@type": "string",
"@value": "GeoIP lookup: src_ip"
},
"description": {
"@type": "string",
"@value": ""
},
"source": {
"@type": "string",
"@value": "rule \"GeoIP lookup: src_ip\"\nwhen\nhas_field(\"src_ip\")\nthen\nlet geo = lookup(\"geoip\", to_string($message.\"src_ip\"));\nset_field(\"src_ip_geo_location\", geo[\"coordinates\"]);\nset_field(\"src_ip_geo_country\", geo[\"country\"].iso_code);\nset_field(\"src_ip_geo_city\", geo[\"city\"].names.en);\nend"
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "lookup_table",
"version": "1"
},
"id": "dc892e81-3ada-4ee9-8c47-d0dcda4c7d65",
"data": {
"default_single_value_type": {
"@type": "string",
"@value": "NULL"
},
"cache_name": {
"@type": "string",
"@value": "79d432a2-a390-4450-b7ca-7ba16eebffe6"
},
"name": {
"@type": "string",
"@value": "geoip"
},
"default_multi_value_type": {
"@type": "string",
"@value": "NULL"
},
"default_multi_value": {
"@type": "string",
"@value": ""
},
"data_adapter_name": {
"@type": "string",
"@value": "db9a5df6-9e1a-4d37-ad73-16a8dd08b5fa"
},
"title": {
"@type": "string",
"@value": "GeoIP"
},
"default_single_value": {
"@type": "string",
"@value": ""
},
"description": {
"@type": "string",
"@value": "Geo IP Lookup"
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "input",
"version": "1"
},
"id": "5905af83-be2f-4c15-a4dc-28f2a3473792",
"id": "ec0618e2-70b3-49d8-898c-3b67ad39f4c6",
"data": {
"title": {
"@type": "string",
@ -409,287 +690,6 @@
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "lookup_adapter",
"version": "1"
},
"id": "51c6d38f-ccb0-4e4e-8e79-1dc03e000e6a",
"data": {
"name": {
"@type": "string",
"@value": "geoip"
},
"title": {
"@type": "string",
"@value": "GeoIP"
},
"description": {
"@type": "string",
"@value": "Geo IP Lookup Table"
},
"configuration": {
"type": {
"@type": "string",
"@value": "maxmind_geoip"
},
"path": {
"@type": "string",
"@value": "/usr/share/graylog/data/data/GeoLite2-Country.mmdb"
},
"database_type": {
"@type": "string",
"@value": "MAXMIND_COUNTRY"
},
"check_interval": {
"@type": "long",
"@value": 1
},
"check_interval_unit": {
"@type": "string",
"@value": "MINUTES"
}
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "lookup_cache",
"version": "1"
},
"id": "c9da3344-22cc-4ba4-bf54-bb4aa6f0a66b",
"data": {
"name": {
"@type": "string",
"@value": "geoip"
},
"title": {
"@type": "string",
"@value": "GeoIP"
},
"description": {
"@type": "string",
"@value": "GeoIP Cache"
},
"configuration": {
"type": {
"@type": "string",
"@value": "guava_cache"
},
"max_size": {
"@type": "integer",
"@value": 1000
},
"expire_after_access": {
"@type": "long",
"@value": 1
},
"expire_after_access_unit": {
"@type": "string",
"@value": "SECONDS"
},
"expire_after_write": {
"@type": "long",
"@value": 0
}
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "lookup_table",
"version": "1"
},
"id": "faaf6109-4c03-4c3b-b083-775aa8b99240",
"data": {
"default_single_value_type": {
"@type": "string",
"@value": "NULL"
},
"cache_name": {
"@type": "string",
"@value": "c9da3344-22cc-4ba4-bf54-bb4aa6f0a66b"
},
"name": {
"@type": "string",
"@value": "geoip"
},
"default_multi_value_type": {
"@type": "string",
"@value": "NULL"
},
"default_multi_value": {
"@type": "string",
"@value": ""
},
"data_adapter_name": {
"@type": "string",
"@value": "51c6d38f-ccb0-4e4e-8e79-1dc03e000e6a"
},
"title": {
"@type": "string",
"@value": "GeoIP"
},
"default_single_value": {
"@type": "string",
"@value": ""
},
"description": {
"@type": "string",
"@value": "Geo IP Lookup"
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "pipeline",
"version": "1"
},
"id": "effc3640-e273-4015-9386-9c2bf695d9be",
"data": {
"title": {
"@type": "string",
"@value": "GeoIP"
},
"description": {
"@type": "string",
"@value": "GeoIP"
},
"source": {
"@type": "string",
"@value": "pipeline \"GeoIP\"\nstage 0 match either\nrule \"GeoIP lookup: src_ip\"\nend"
},
"connected_streams": [
{
"@type": "string",
"@value": "cc46a62f-b500-4fe7-865d-4539e75deda6"
}
]
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "pipeline_rule",
"version": "1"
},
"id": "ce8fdbc0-da4f-464e-9ab3-016f667576d8",
"data": {
"title": {
"@type": "string",
"@value": "GeoIP lookup: src_ip"
},
"description": {
"@type": "string",
"@value": ""
},
"source": {
"@type": "string",
"@value": "rule \"GeoIP lookup: src_ip\"\nwhen\nhas_field(\"src_ip\")\nthen\nlet geo = lookup(\"geoip\", to_string($message.\"src_ip\"));\nset_field(\"src_ip_geo_location\", geo[\"coordinates\"]);\nset_field(\"src_ip_geo_country\", geo[\"country\"].iso_code);\nset_field(\"src_ip_geo_city\", geo[\"city\"].names.en);\nend"
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
},
{
"v": "1",
"type": {
"name": "stream",
"version": "1"
},
"id": "cc46a62f-b500-4fe7-865d-4539e75deda6",
"data": {
"alarm_callbacks": [],
"outputs": [],
"remove_matches": {
"@type": "boolean",
"@value": true
},
"title": {
"@type": "string",
"@value": "OPNsense / filterlog"
},
"stream_rules": [
{
"type": {
"@type": "string",
"@value": "CONTAINS"
},
"field": {
"@type": "string",
"@value": "message"
},
"value": {
"@type": "string",
"@value": "filterlog"
},
"inverted": {
"@type": "boolean",
"@value": false
},
"description": {
"@type": "string",
"@value": ""
}
}
],
"alert_conditions": [],
"matching_type": {
"@type": "string",
"@value": "AND"
},
"disabled": {
"@type": "boolean",
"@value": false
},
"description": {
"@type": "string",
"@value": "OPNsense filter logs"
},
"default_stream": {
"@type": "boolean",
"@value": false
}
},
"constraints": [
{
"type": "server-version",
"version": ">=4.2.1+5442e44"
}
]
}
]
}