eg:
curl -XPOST "http://127.0.0.1:9200/index-aaa-1/_doc/" -d '
{
"@timestamp" : "2019-06-18T01:02:02+08:00",
"input_name" : "unix_socket_input",
"input_type" : "unix_socket",
"data" : "t.eet.nl",
"data_type" : "tdomain",
"behave_uuid" : "unix-socket-1080432435823907",
"input_uuid" : "tbk3sf2l46sfa2rfh6dog",
"machine" : "11.11.11.11",
"time" : 1560790922,
"input_time" : 1560790922,
"related_ip" : "58.158.177.102",
"source_ip" : "127.0.0.1",
"event_type" : "net",
"behave_source" : "unix_input-127.0.0.1",
}
没有评论:
发表评论