From ebca6b36967183202cfbf481f4c2e62135758e35 Mon Sep 17 00:00:00 2001
From: l <luisgguijarro9@gmail.com>
Date: Tue, 26 Mar 2019 16:30:50 +0100
Subject: [PATCH] Fixing duplicate alerts with kubernetes

---
 wazuh/config/filebeat.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wazuh/config/filebeat.yml b/wazuh/config/filebeat.yml
index 1835863b..bb02a5d8 100644
--- a/wazuh/config/filebeat.yml
+++ b/wazuh/config/filebeat.yml
@@ -8,6 +8,7 @@ filebeat:
     json.message_key: log
     json.keys_under_root: true
     json.overwrite_keys: true
+    tail_files: true
 
 output:
  logstash: