From 373e6ee49347b838b271457597c9f7f0d48e5e8b Mon Sep 17 00:00:00 2001 From: forana Date: Tue, 2 Oct 2018 06:49:19 -0500 Subject: [PATCH] updated logstash config to remove deprecation warnings --- wazuh/config/filebeat.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/wazuh/config/filebeat.yml b/wazuh/config/filebeat.yml index 750d0ed9..0f2ea6ce 100644 --- a/wazuh/config/filebeat.yml +++ b/wazuh/config/filebeat.yml @@ -1,10 +1,11 @@ # Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2) filebeat: - prospectors: - - input_type: log + inputs: + - type: log paths: - "/var/ossec/data/logs/alerts/alerts.json" - document_type: wazuh-alerts + fields: + document_type: wazuh-alerts json.message_key: log json.keys_under_root: true json.overwrite_keys: true