forked from wazuh/wazuh-docker
Update Filebeat configuration (#88)
This commit is contained in:
@@ -1,11 +1,10 @@
|
||||
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
|
||||
filebeat:
|
||||
inputs:
|
||||
prospectors:
|
||||
- type: log
|
||||
paths:
|
||||
- "/var/ossec/data/logs/alerts/alerts.json"
|
||||
fields:
|
||||
document_type: wazuh-alerts
|
||||
- "/var/ossec/logs/alerts/alerts.json"
|
||||
document_type: json
|
||||
json.message_key: log
|
||||
json.keys_under_root: true
|
||||
json.overwrite_keys: true
|
||||
|
||||
Reference in New Issue
Block a user