# Wazuh - Filebeat configuration file filebeat: inputs: - type: log paths: - "/var/ossec/logs/alerts/alerts.json" output: logstash: # The Logstash hosts hosts: ["logstash:5000"] # ssl: # certificate_authorities: ["/etc/filebeat/logstash.crt"]