Atualização - 18/04/2026 - 17:53

roteiros/04-lab02/README.md

@@ -0,0 +1 @@
+ops

roteiros/04-lab02/docker-compose.yml

@@ -0,0 +1,8 @@
+services:
+ rk-siem-host02:
+    image: ricardokleber/rk-siem-host02:latest
+    container_name: rk-siem-host02
+    hostname: rk-siem-host02
+    tty: true
+    stdin_open: true
+    restart: always

roteiros/04-lab02/fluent-bit.conf

@@ -0,0 +1,27 @@
+# cat /etc/fluent-bit/fluent-bit.conf 
+[SERVICE]
+    Flush         1
+    Log_Level     info
+    Daemon        off
+#    Parsers_File  parsers.conf
+
+# Coleta logs do Apache
+[INPUT]
+    Name           tail
+    Path	   /var/log/apache2/access.log
+    Tag            apache-logs-acesso
+#    Parser         apache2
+
+# Envio para o RK-SIEM-CORE
+[OUTPUT]
+    Name            opensearch
+    Match           apache-logs-acesso
+    Host            172.20.0.1
+    Port            9200
+    Index           host02-logs
+    Type            _doc
+    HTTP_User       admin
+    HTTP_Passwd     admin
+    tls             On
+    tls.verify      Off
+    Suppress_Type_Name   On