forked from wazuh/wazuh-docker
Update Filebeat configuration (#88)
This commit is contained in:
@@ -1,11 +1,10 @@
|
|||||||
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
|
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
|
||||||
filebeat:
|
filebeat:
|
||||||
inputs:
|
prospectors:
|
||||||
- type: log
|
- type: log
|
||||||
paths:
|
paths:
|
||||||
- "/var/ossec/data/logs/alerts/alerts.json"
|
- "/var/ossec/logs/alerts/alerts.json"
|
||||||
fields:
|
document_type: json
|
||||||
document_type: wazuh-alerts
|
|
||||||
json.message_key: log
|
json.message_key: log
|
||||||
json.keys_under_root: true
|
json.keys_under_root: true
|
||||||
json.overwrite_keys: true
|
json.overwrite_keys: true
|
||||||
|
|||||||
Reference in New Issue
Block a user