forked from wazuh/wazuh-docker
17 lines
366 B
YAML
17 lines
366 B
YAML
filebeat:
|
|
prospectors:
|
|
- input_type: log
|
|
paths:
|
|
- "/var/ossec/data/logs/alerts/alerts.json"
|
|
document_type: wazuh-alerts
|
|
json.message_key: log
|
|
json.keys_under_root: true
|
|
json.overwrite_keys: true
|
|
|
|
output:
|
|
logstash:
|
|
# The Logstash hosts
|
|
hosts: ["logstash:5000"]
|
|
# ssl:
|
|
# certificate_authorities: ["/etc/filebeat/logstash.crt"]
|