securityonion-elastic: Logstash should include all inputs

[dougburks]

Currently, if you have a master server and storage nodes, then logstash on the master server only consumes from syslog. This prevents sending beats and other inputs.

We need to ensure that Logstash includes all inputs. In the meantime, folks should be able to add inputs manually like the following:

sudo ln -sf ../conf.d.available/0006_input_beats.conf /etc/logstash/conf.d.redis.output/0006_input_beats.conf
sudo so-logstash-restart

For more information, please see:
https://groups.google.com/d/topic/security-onion/dQuiY1bTvg8/discussion

[dougburks]

commit:
Security-Onion-Solutions/securityonion-elastic@e8f62bf

[dougburks]

Submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/UimOraRDKnc/discussion

[dougburks]

Published:
https://blog.securityonion.net/2018/08/elastic-632-now-available-for-security.html