diff --git a/wazuh/config/filebeat.yml b/wazuh/config/filebeat.yml index 750d0ed9..0f2ea6ce 100644 --- a/wazuh/config/filebeat.yml +++ b/wazuh/config/filebeat.yml @@ -1,10 +1,11 @@ # Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2) filebeat: - prospectors: - - input_type: log + inputs: + - type: log paths: - "/var/ossec/data/logs/alerts/alerts.json" - document_type: wazuh-alerts + fields: + document_type: wazuh-alerts json.message_key: log json.keys_under_root: true json.overwrite_keys: true