Skip to content

Commit 390a86d

Browse files
authored
Remove f5/firepass rsa2elk fileset (elastic#20160)
Won't be shipping this fileset as the product is EOL.
1 parent 3811728 commit 390a86d

16 files changed

+1
-8575
lines changed

CHANGELOG.next.asciidoc

-1
Original file line numberDiff line numberDiff line change
@@ -475,7 +475,6 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
475475
- Add experimental dataset cisco/nexus for Cisco Nexus logs {pull}19713[19713]
476476
- Add experimental dataset citrix/virtualapps for Citrix Virtual Apps logs {pull}19713[19713]
477477
- Add experimental dataset cylance/protect for Cylance Protect logs {pull}19713[19713]
478-
- Add experimental dataset f5/firepass for F5 FirePass SSL VPN logs {pull}19713[19713]
479478
- Add experimental dataset fortinet/clientendpoint for Fortinet FortiClient Endpoint Protection logs {pull}19713[19713]
480479
- Add experimental dataset imperva/securesphere for Imperva Secure Sphere logs {pull}19713[19713]
481480
- Add experimental dataset infoblox/nios for Infoblox Network Identity Operating System logs {pull}19713[19713]

filebeat/docs/modules/f5.asciidoc

-45
Original file line numberDiff line numberDiff line change
@@ -67,51 +67,6 @@ will be found under `rsa.raw`. The default is false.
6767

6868
:fileset_ex!:
6969

70-
[float]
71-
==== `firepass` fileset settings
72-
73-
experimental[]
74-
75-
NOTE: This was converted from RSA NetWitness log parser XML "firepass" device revision 0.
76-
77-
*`var.input`*::
78-
79-
The input from which messages are read. One of `file`, `tcp` or `udp`.
80-
81-
*`var.syslog_host`*::
82-
83-
The address to listen to UDP or TCP based syslog traffic.
84-
Defaults to `localhost`.
85-
Set to `0.0.0.0` to bind to all available interfaces.
86-
87-
*`var.syslog_port`*::
88-
89-
The port to listen for syslog traffic. Defaults to `9509`
90-
91-
NOTE: Ports below 1024 require Filebeat to run as root.
92-
93-
*`var.tz_offset`*::
94-
95-
By default, datetimes in the logs will be interpreted as relative to
96-
the timezone configured in the host where {beatname_uc} is running. If ingesting
97-
logs from a host on a different timezone, use this field to set the timezone
98-
offset so that datetimes are correctly parsed. Valid values are in the form
99-
±HH:mm, for example, `-07:00` for `UTC-7`.
100-
101-
*`var.rsa_fields`*::
102-
103-
Flag to control the addition of non-ECS fields to the event. Defaults to true,
104-
which causes both ECS and custom fields under `rsa` to be are added.
105-
106-
*`var.keep_raw_fields`*::
107-
108-
Flag to control the addition of the raw parser fields to the event. This fields
109-
will be found under `rsa.raw`. The default is false.
110-
111-
:has-dashboards!:
112-
113-
:fileset_ex!:
114-
11570
:modulename!:
11671

11772

filebeat/tests/system/test_modules.py

-1
Original file line numberDiff line numberDiff line change
@@ -227,7 +227,6 @@ def clean_keys(obj):
227227
"cef.log",
228228
"cisco.asa",
229229
"cisco.ios",
230-
"f5.firepass",
231230
"fortinet.clientendpoint",
232231
"haproxy.log",
233232
"icinga.startup",

x-pack/filebeat/filebeat.reference.yml

-19
Original file line numberDiff line numberDiff line change
@@ -600,25 +600,6 @@ filebeat.modules:
600600
# "+02:00" for GMT+02:00
601601
# var.tz_offset: local
602602

603-
firepass:
604-
enabled: true
605-
606-
# Set which input to use between udp (default), tcp or file.
607-
# var.input: udp
608-
# var.syslog_host: localhost
609-
# var.syslog_port: 9509
610-
611-
# Set paths for the log files when file input is used.
612-
# var.paths:
613-
614-
# Toggle output of non-ECS fields (default true).
615-
# var.rsa_fields: true
616-
617-
# Set custom timezone offset.
618-
# "local" (default) for system timezone.
619-
# "+02:00" for GMT+02:00
620-
# var.tz_offset: local
621-
622603
#------------------------------- Fortinet Module -------------------------------
623604
- module: fortinet
624605
firewall:

x-pack/filebeat/module/f5/_meta/config.yml

-19
Original file line numberDiff line numberDiff line change
@@ -17,22 +17,3 @@
1717
# "local" (default) for system timezone.
1818
# "+02:00" for GMT+02:00
1919
# var.tz_offset: local
20-
21-
firepass:
22-
enabled: true
23-
24-
# Set which input to use between udp (default), tcp or file.
25-
# var.input: udp
26-
# var.syslog_host: localhost
27-
# var.syslog_port: 9509
28-
29-
# Set paths for the log files when file input is used.
30-
# var.paths:
31-
32-
# Toggle output of non-ECS fields (default true).
33-
# var.rsa_fields: true
34-
35-
# Set custom timezone offset.
36-
# "local" (default) for system timezone.
37-
# "+02:00" for GMT+02:00
38-
# var.tz_offset: local

x-pack/filebeat/module/f5/_meta/docs.asciidoc

-45
Original file line numberDiff line numberDiff line change
@@ -62,50 +62,5 @@ will be found under `rsa.raw`. The default is false.
6262

6363
:fileset_ex!:
6464

65-
[float]
66-
==== `firepass` fileset settings
67-
68-
experimental[]
69-
70-
NOTE: This was converted from RSA NetWitness log parser XML "firepass" device revision 0.
71-
72-
*`var.input`*::
73-
74-
The input from which messages are read. One of `file`, `tcp` or `udp`.
75-
76-
*`var.syslog_host`*::
77-
78-
The address to listen to UDP or TCP based syslog traffic.
79-
Defaults to `localhost`.
80-
Set to `0.0.0.0` to bind to all available interfaces.
81-
82-
*`var.syslog_port`*::
83-
84-
The port to listen for syslog traffic. Defaults to `9509`
85-
86-
NOTE: Ports below 1024 require Filebeat to run as root.
87-
88-
*`var.tz_offset`*::
89-
90-
By default, datetimes in the logs will be interpreted as relative to
91-
the timezone configured in the host where {beatname_uc} is running. If ingesting
92-
logs from a host on a different timezone, use this field to set the timezone
93-
offset so that datetimes are correctly parsed. Valid values are in the form
94-
±HH:mm, for example, `-07:00` for `UTC-7`.
95-
96-
*`var.rsa_fields`*::
97-
98-
Flag to control the addition of non-ECS fields to the event. Defaults to true,
99-
which causes both ECS and custom fields under `rsa` to be are added.
100-
101-
*`var.keep_raw_fields`*::
102-
103-
Flag to control the addition of the raw parser fields to the event. This fields
104-
will be found under `rsa.raw`. The default is false.
105-
106-
:has-dashboards!:
107-
108-
:fileset_ex!:
109-
11065
:modulename!:
11166

x-pack/filebeat/module/f5/fields.go

+1-1
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)