forked from wazuh/wazuh-docker
update to the last template versions
This commit is contained in:
@@ -4,6 +4,9 @@
|
||||
# beats {
|
||||
# port => 5000
|
||||
# codec => "json_lines"
|
||||
# ssl => true
|
||||
# ssl_certificate => "/etc/logstash/logstash.crt"
|
||||
# ssl_key => "/etc/logstash/logstash.key"
|
||||
# }
|
||||
#}
|
||||
## Local Wazuh Manager - JSON file input
|
||||
@@ -25,11 +28,11 @@ filter {
|
||||
}
|
||||
output {
|
||||
elasticsearch {
|
||||
hosts => ["elasticsearch:9200"]
|
||||
hosts => ["localhost:9200"]
|
||||
index => "wazuh-alerts-%{+YYYY.MM.dd}"
|
||||
document_type => "wazuh"
|
||||
template => "/etc/logstash/wazuh-elastic5-template.json"
|
||||
template_name => "wazuh"
|
||||
template_overwrite => true
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user