From 2c6a5bd347e23e86a740501323676a765fdee4c8 Mon Sep 17 00:00:00 2001 From: Pierre Penhouet Date: Wed, 16 Oct 2024 17:57:39 +0200 Subject: [PATCH] Fix extended conf for vmware conf --- docs/integration/categories/endpoint/vmware_vcenter.md | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/docs/integration/categories/endpoint/vmware_vcenter.md b/docs/integration/categories/endpoint/vmware_vcenter.md index 630c0e31a9..9d9f4930a1 100644 --- a/docs/integration/categories/endpoint/vmware_vcenter.md +++ b/docs/integration/categories/endpoint/vmware_vcenter.md @@ -40,16 +40,14 @@ sudo vim ./extended_conf/11-vcenter.conf with the following template: ``` -$DefaultNetstreamDriverCAFile /etc/rsyslog.d/Sekoia-io-intake.pem - input(type="imtcp" port="PORT" ruleset="remoteVmwarevCenter") template(name="SEKOIAIOTemplate" type="string" string="<%pri%>1 %timestamp:::date-rfc3339% %hostname% %app-name% %procid% LOG [SEKOIA@53288 intake_key=\"YOUR_INTAKE_KEY\"] %msg%\n") ruleset(name="remoteVmwarevCenter"){ - if($programname == "vpxd") { + if($programname == "vpxd") then { action( - type="omfwd" - protocol="tcp" + type="omfwd" + protocol="tcp" target="intake.sekoia.io" port="10514" TCP_Framing="octet-counted"