zincsearch.md

Zincsearch

• Category: Logs
• Website: https://docs.zincsearch.com/

Table of content

• Zincsearch
  • Table of content
  • Configuration
  • Example of config.yaml
  • Additional info
  • Screenshots

Configuration

Setting	Env var	Default value	Description
zincsearch.hostport	ZINCSEARCH_HOSTPORT		http://{domain or ip}:{port}, if not empty, ZincSearch output is enabled
zincsearch.index	ZINCSEARCH_INDEX	falco	Index
zincsearch.username	ZINCSEARCH_USERNAME		Use this username to authenticate to ZincSearch
zincsearch.password	ZINCSEARCH_PASSWORD		Use this password to authenticate to ZincSearch
zincsearch.checkcert	ZINCSEARCH_CHECKCERT	true	Check if ssl certificate of the output is valid
zincsearch.minimumpriority	ZINCSEARCH_MINIMUMPRIORITY	"" (= debug)	Minimum priority of event for using this output, order is emergency,alert,critical,error,warning,notice,informational,debug or ""

Note

The Env var values override the settings from yaml file.

Example of config.yaml

zincsearch:
  hostport: "" # http://{domain or ip}:{port}, if not empty, ZincSearch output is enabled
  # index: "falco" # Index (default: falco)
  # username: "" # Use this username to authenticate to ZincSearch (default: "")
  # password: "" # Use this password to authenticate to ZincSearch (default: "")
  # checkcert: true # check if ssl certificate of the output is valid (default: true)
  # minimumpriority: "" # minimum priority of event for using this output, order is emergency|alert|critical|error|warning|notice|informational|debug or "" (default)

Additional info

Screenshots