change defaults to match the parent (config) defaults
removing log4j elasticsearch input
gutting logstash config to troubleshoot error messages
removing deprecated charset setting from lumberjack input for logstash
still working on logstash config errors
leaving only elasticsearch output
removing deprecated format setting from logstash udp input
reverting change to kv syntax
adding back the global negate dhclient
updating logstash config for 1.2.2
removing the lumberjack offset and using the pam_unix line to track sshd session_opened
parsing several versions of ssh invalid user
avoiding duplicate hits for a single invalid user login attempt
added params: logstash_baseurl & logstash_jar_type
set logstash_provider logstash_jartype logstash_baseurl defaults to their logstash::config settings
jar_type not jartype
jar_type not jartype
adding the host field back for secure and messages in logstash config