From 81035c39db720a7d965468dc9b3765e8ff3b016a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jes=C3=BAs=20Linares?= Date: Thu, 3 Jan 2019 15:37:48 +0100 Subject: [PATCH] Update Filebeat configuration (#88) --- wazuh/config/filebeat.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/wazuh/config/filebeat.yml b/wazuh/config/filebeat.yml index 0f2ea6ce..fcb32e1e 100644 --- a/wazuh/config/filebeat.yml +++ b/wazuh/config/filebeat.yml @@ -1,11 +1,10 @@ # Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2) filebeat: - inputs: + prospectors: - type: log paths: - - "/var/ossec/data/logs/alerts/alerts.json" - fields: - document_type: wazuh-alerts + - "/var/ossec/logs/alerts/alerts.json" + document_type: json json.message_key: log json.keys_under_root: true json.overwrite_keys: true