In the project it is intended that the logs obtained from logstash are sent to mongodb. Docker-compose is used for this and although the containers are connected, the logs are not sent. The part of docker-compose that corresponds to mongodb is the following:
It should also be noted that there is an .env file in which the environment variables are being declared, which would be as follows:
And the entrypoint of mongodb is:
It seems that the connection is made correctly through docker-compose but the logstash output logs do not appear in the mongo container when fetched in the attach shell with the commands:
- use suricata [to switch to this database]
- db.suricata.find (). pretty () [to search the logs within the suricata database]