Skip to content

Commit a8ef3b6

Browse files
committed
feat(suricata): add Suricata data type and update logstash filter integration
1 parent 530279a commit a8ef3b6

1 file changed

Lines changed: 6 additions & 5 deletions

File tree

backend/src/main/resources/config/liquibase/changelog/20250814001_adding_suricata.xml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -163,7 +163,11 @@
163163
</createProcedure>
164164
<sql dbms="postgresql" splitStatements="true" stripComments="true">
165165
<![CDATA[
166-
INSERT INTO utm_logstash_filter (id, logstash_filter, filter_name, filter_group_id, system_owner, module_name, is_active, filter_version)
166+
167+
INSERT INTO utm_data_types (id, data_type, data_type_name, data_type_description, last_update, included, system_owner)
168+
VALUES (49, 'suricata', 'Suricata', 'Used to filter logs and apply alerting rules related to Suricata integration', '2025-08-22 21:35:38.627000', true, true);
169+
170+
INSERT INTO utm_logstash_filter (id, logstash_filter, filter_name, filter_group_id, system_owner, module_name, is_active, filter_version, data_type_id)
167171
VALUES (1530, $$filter {
168172
169173
# Suricata filter version 1.0.4
@@ -577,7 +581,7 @@
577581
remove_field => ["original_log_message", "suricata_json"]
578582
}
579583
}
580-
}$$, 'suricata', null, true, 'SURICATA', false, '2.0.0');
584+
}$$, 'suricata', null, true, 'SURICATA', false, '2.0.0', 49);
581585
]]>
582586
</sql>
583587
<sql dbms="postgresql" splitStatements="true" stripComments="true">
@@ -591,9 +595,6 @@
591595
INSERT INTO utm_index_pattern (id, pattern, pattern_module, pattern_system, is_active)
592596
VALUES (68,'log-suricata-*', 'SURICATA', true, true);
593597
594-
INSERT INTO utm_data_source_config (data_type, data_type_name, system_owner, included)
595-
VALUES ( 'suricata', 'Suricata', true, true);
596-
597598
INSERT INTO utm_menu (id, name, url, parent_id, type, dashboard_id, position, menu_active, menu_action, menu_icon, module_name_short)
598599
VALUES (266, 'Suricata', 'discover/log-analyzer?patternId=63&indexPattern=log-suricata-*', 200, 1, null, 66, false, false, null, 'SURICATA');
599600

0 commit comments

Comments
 (0)