diff --git a/wazuh/config/filebeat_to_logstash.yml b/wazuh/config/filebeat_to_logstash.yml index 8eec470b..0e4dd97c 100644 --- a/wazuh/config/filebeat_to_logstash.yml +++ b/wazuh/config/filebeat_to_logstash.yml @@ -5,7 +5,12 @@ filebeat: inputs: - type: log paths: - - "/var/ossec/logs/alerts/alerts.json" + - "/var/ossec/logs/alerts/alerts.json" + # - type: log + # paths: + # - "/var/ossec/logs/archives/archives.json" + # fields: + # wazuh_log_file: "archives" output: logstash: