OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	08/12/2024 10:35:58 AM	rwxr-xr-x
📄 ChromePHPFormatter.php	2.3 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 ElasticaFormatter.php	2.13 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 ElasticsearchFormatter.php	1.97 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 FlowdockFormatter.php	2.58 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 FluentdFormatter.php	2.38 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 FormatterInterface.php	908 bytes	08/12/2024 10:35:56 AM	rw-r--r--
📄 GelfMessageFormatter.php	4.77 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 GoogleCloudLoggingFormatter.php	1.19 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 HtmlFormatter.php	4.66 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 JsonFormatter.php	6.23 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 LineFormatter.php	9.93 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 LogglyFormatter.php	1.3 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 LogmaticFormatter.php	1.6 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 LogstashFormatter.php	3.53 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 MongoDBFormatter.php	4.96 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 NormalizerFormatter.php	10.42 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 ScalarFormatter.php	1.16 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 SyslogFormatter.php	1.91 KB	08/12/2024 10:35:56 AM	rw-r--r--
📄 WildfireFormatter.php	4.11 KB	08/12/2024 10:35:56 AM	rw-r--r--

Editing: LogstashFormatter.php

<?php declare(strict_types=1);

/*
 * This file is part of the Monolog package.
 *
 * (c) Jordi Boggiano <j.boggiano@seld.be>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Monolog\Formatter;

use Monolog\LogRecord;

/**
 * Serializes a log message to Logstash Event Format
 *
 * @see https://www.elastic.co/products/logstash
 * @see https://github.com/elastic/logstash/blob/master/logstash-core/src/main/java/org/logstash/Event.java
 *
 * @author Tim Mower <timothy.mower@gmail.com>
 */
class LogstashFormatter extends NormalizerFormatter
{
    /**
     * @var string the name of the system for the Logstash log message, used to fill the @source field
     */
    protected string $systemName;

/**
     * @var string an application name for the Logstash log message, used to fill the @type field
     */
    protected string $applicationName;

/**
     * @var string the key for 'extra' fields from the Monolog record
     */
    protected string $extraKey;

/**
     * @var string the key for 'context' fields from the Monolog record
     */
    protected string $contextKey;

/**
     * @param string      $applicationName The application that sends the data, used as the "type" field of logstash
     * @param string|null $systemName      The system/machine name, used as the "source" field of logstash, defaults to the hostname of the machine
     * @param string      $extraKey        The key for extra keys inside logstash "fields", defaults to extra
     * @param string      $contextKey      The key for context keys inside logstash "fields", defaults to context
     *
     * @throws \RuntimeException If the function json_encode does not exist
     */
    public function __construct(string $applicationName, ?string $systemName = null, string $extraKey = 'extra', string $contextKey = 'context')
    {
        // logstash requires a ISO 8601 format date with optional millisecond precision.
        parent::__construct('Y-m-d\TH:i:s.uP');

$this->systemName = $systemName === null ? (string) gethostname() : $systemName;
        $this->applicationName = $applicationName;
        $this->extraKey = $extraKey;
        $this->contextKey = $contextKey;
    }

/**
     * @inheritDoc
     */
    public function format(LogRecord $record): string
    {
        $recordData = parent::format($record);

$message = [
            '@timestamp' => $recordData['datetime'],
            '@version' => 1,
            'host' => $this->systemName,
        ];
        if (isset($recordData['message'])) {
            $message['message'] = $recordData['message'];
        }
        if (isset($recordData['channel'])) {
            $message['type'] = $recordData['channel'];
            $message['channel'] = $recordData['channel'];
        }
        if (isset($recordData['level_name'])) {
            $message['level'] = $recordData['level_name'];
        }
        if (isset($recordData['level'])) {
            $message['monolog_level'] = $recordData['level'];
        }
        if ('' !== $this->applicationName) {
            $message['type'] = $this->applicationName;
        }
        if (\count($recordData['extra']) > 0) {
            $message[$this->extraKey] = $recordData['extra'];
        }
        if (\count($recordData['context']) > 0) {
            $message[$this->contextKey] = $recordData['context'];
        }

return $this->toJson($message) . "\n";
    }
}