118b5fccaf
Update pfBlocker graphs I updated the telegraf config to utilize tail rather than the soon to be phased out logparser input. As a result, i'm using new measurements for IP and DNS stats. I'm ok with clearing these stats, but if you prefer, you can use/copy the graphs from this commit:0df1017250/pfSense-Grafana-Dashboard.jsonI updated the field names to reflect what's being written in the pfBlocker logs (as best as possible)232722ac52/net/pfSense-pkg-pfBlockerNG-devel/files/usr/local/pkg/pfblockerng/pfblockerng.inc (L4597)
28 lines
1.1 KiB
Plaintext
28 lines
1.1 KiB
Plaintext
[[inputs.exec]]
|
|
commands = [
|
|
"/usr/local/bin/telegraf_pfinterface.php",
|
|
"/usr/local/bin/telegraf_gateways.py",
|
|
"sh /usr/local/bin/telegraf_temperature.sh"
|
|
]
|
|
data_format = "influx"
|
|
|
|
[[inputs.tail]]
|
|
files = ["/var/log/pfblockerng/ip_block.log"]
|
|
name_suffix = "_ipblock"
|
|
data_format = "csv"
|
|
csv_delimiter = ","
|
|
csv_tag_columns = ["geoip_code","feed_name","src_ip"]
|
|
csv_column_names = ["timestamp","rulenum","interface","friendlyname","action","ip_version","protocolid","protocol","src_ip","dest_ip","src_port","dest_port","direction","geoip_code","ip_alias_name","ip_evaluated","feed_name","resolvedhostname","clienthostname","asn","duplicateeventstatus"]
|
|
|
|
[[inputs.tail]]
|
|
files = ["/var/log/pfblockerng/dnsbl.log"]
|
|
name_suffix = "_dnsbl"
|
|
data_format = "csv"
|
|
csv_delimiter = ","
|
|
csv_tag_columns = ["src_ip","tld"]
|
|
csv_column_names = ["blocktype","timestamp","domain","src_ip","req_agent","blockmethod","blocklist","tld","feed_name","duplicateeventstatus"]
|
|
|
|
#[[inputs.unbound]]
|
|
# server = "127.0.0.1:953"
|
|
# binary = "/usr/local/bin/telegraf_unbound.sh"
|