bulkupdate

dockerfiles/cherokee/cherokee.dockerfile

@@ -0,0 +1,10 @@
+FROM debian:stretch
+#FROM ubuntu:16.04
+
+MAINTAINER tabledevil
+
+
+RUN groupadd -g 999 user && \
+    useradd -r -u 999 -g user user
+
+USER user

dockerfiles/logstash/configs/bwi.conf

@@ -76,6 +76,10 @@ filter {
         #     source => "mwg[src]"
         #     target => "mwg[src_geo]"
         # }
+        #url aufteilen nach subdomain.domain.tld
+        grok {
+          match => { "mwg[url]" => "%{URIPROTO:mwg[urlparsed][proto]}://(?<mwg[urlparsed][subdom]>[^/]+)\.(?<mwg[urlparsed][domain]>[^/.]+)\.(?<mwg[urlparsed][tld]>[^/.]+)" }
+        }
 
 
           # mutate {