yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Read archives events in Filebeat (#387)

Browse Source
This commit is contained in:
AlfonsoRBJ
2020-09-24 17:48:46 +02:00
committed by GitHub
parent f7a3547578
commit cd1e0f0aa3
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wazuh/config/filebeat_to_logstash.yml
+6 -1
View File
@@ -5,7 +5,12 @@ filebeat:
inputs: inputs:
- type: log - type: log
paths: paths:
- "/var/ossec/logs/alerts/alerts.json" - "/var/ossec/logs/alerts/alerts.json"
# - type: log
# paths:
# - "/var/ossec/logs/archives/archives.json"
# fields:
# wazuh_log_file: "archives"
output: output:
logstash: logstash: