Skip to content

Commit

Permalink
Fix golden data (2)
Browse files Browse the repository at this point in the history
  • Loading branch information
@adriansr
adriansr committed Jan 22, 2019
1 parent c114f83 commit 5fed5a9
Show file tree
Hide file tree
Showing 2 changed files with 28 additions and 0 deletions.
20 changes: 20 additions & 0 deletions x-pack/filebeat/module/suricata/eve/test/eve-alerts.log-expected.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 347,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -115,6 +116,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 347,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -197,6 +199,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 347,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -279,6 +282,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 347,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -361,6 +365,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 347,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -443,6 +448,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 347,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -525,6 +531,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 497,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -605,6 +612,7 @@
"network.packets": 7,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 487,
"source.ip": "192.168.1.146",
"source.packets": 4,
Expand Down Expand Up @@ -685,6 +693,7 @@
"network.packets": 11,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 842,
"source.ip": "192.168.1.146",
"source.packets": 6,
Expand Down Expand Up @@ -765,6 +774,7 @@
"network.packets": 126,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 4810,
"source.ip": "192.168.1.146",
"source.packets": 64,
Expand Down Expand Up @@ -845,6 +855,7 @@
"network.packets": 185,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 6591,
"source.ip": "192.168.1.146",
"source.packets": 87,
Expand Down Expand Up @@ -925,6 +936,7 @@
"network.packets": 377,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 11460,
"source.ip": "192.168.1.146",
"source.packets": 156,
Expand Down Expand Up @@ -1005,6 +1017,7 @@
"network.packets": 131,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 4895,
"source.ip": "192.168.1.146",
"source.packets": 64,
Expand Down Expand Up @@ -1085,6 +1098,7 @@
"network.packets": 210,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 6932,
"source.ip": "192.168.1.146",
"source.packets": 91,
Expand Down Expand Up @@ -1165,6 +1179,7 @@
"network.packets": 412,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 11679,
"source.ip": "192.168.1.146",
"source.packets": 159,
Expand Down Expand Up @@ -1245,6 +1260,7 @@
"network.packets": 504,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 13986,
"source.ip": "192.168.1.146",
"source.packets": 190,
Expand Down Expand Up @@ -1325,6 +1341,7 @@
"network.packets": 916,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 23361,
"source.ip": "192.168.1.146",
"source.packets": 328,
Expand Down Expand Up @@ -1405,6 +1422,7 @@
"network.packets": 921,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 23758,
"source.ip": "192.168.1.146",
"source.packets": 330,
Expand Down Expand Up @@ -1484,6 +1502,7 @@
"network.packets": 1503,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 36819,
"source.ip": "192.168.1.146",
"source.packets": 524,
Expand Down Expand Up @@ -1562,6 +1581,7 @@
"network.packets": 1654,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 40452,
"source.ip": "192.168.1.146",
"source.packets": 575,
Expand Down
8 changes: 8 additions & 0 deletions x-pack/filebeat/module/suricata/eve/test/eve-small.log-expected.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@
"input.type": "log",
"log.offset": 0,
"network.transport": "tcp",
"service.type": "suricata",
"source.ip": "192.168.86.85",
"source.port": 55406,
"suricata.eve.dest_ip": "192.168.253.112",
Expand Down Expand Up @@ -54,6 +55,7 @@
"network.packets": 7,
"network.protocol": "tls",
"network.transport": "tcp",
"service.type": "suricata",
"source.bytes": 793,
"source.ip": "192.168.86.85",
"source.packets": 4,
Expand Down Expand Up @@ -105,6 +107,7 @@
"input.type": "log",
"log.offset": 985,
"network.transport": "tcp",
"service.type": "suricata",
"source.ip": "192.168.86.85",
"source.port": 56119,
"suricata.eve.dest_ip": "192.168.86.28",
Expand Down Expand Up @@ -160,6 +163,7 @@
"log.offset": 1507,
"network.protocol": "http",
"network.transport": "tcp",
"service.type": "suricata",
"source.ip": "192.168.86.28",
"source.port": 8008,
"suricata.eve.app_proto": "http",
Expand Down Expand Up @@ -217,6 +221,7 @@
"input.type": "log",
"log.offset": 2347,
"network.transport": "udp",
"service.type": "suricata",
"source.ip": "192.168.86.1",
"source.port": 53,
"suricata.eve.dest_ip": "192.168.86.85",
Expand Down Expand Up @@ -249,6 +254,7 @@
"fileset.name": "eve",
"input.type": "log",
"log.offset": 2687,
"service.type": "suricata",
"suricata.eve.event_type": "stats",
"suricata.eve.stats.app_layer.flow.dcerpc_tcp": 0,
"suricata.eve.stats.app_layer.flow.dcerpc_udp": 0,
Expand Down Expand Up @@ -388,6 +394,7 @@
"input.type": "log",
"log.offset": 4683,
"network.transport": "tcp",
"service.type": "suricata",
"source.ip": "192.168.86.85",
"source.port": 56187,
"suricata.eve.dest_ip": "17.142.164.13",
Expand Down Expand Up @@ -431,6 +438,7 @@
"network.packets": 1,
"network.protocol": "failed",
"network.transport": "udp",
"service.type": "suricata",
"source.bytes": 110,
"source.ip": "fe80:0000:0000:0000:fada:0cff:fedc:87f1",
"source.packets": 1,
Expand Down

0 comments on commit 5fed5a9

Please sign in to comment.