mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-06-14 22:28:43 +02:00
Add filebeat modules
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
# Module: netflow
|
||||
# Docs: https://www.elastic.co/guide/en/beats/filebeat/7.x/filebeat-module-netflow.html
|
||||
|
||||
- module: netflow
|
||||
log:
|
||||
enabled: true
|
||||
var:
|
||||
netflow_host: localhost
|
||||
netflow_port: 2055
|
||||
# internal_networks specifies which networks are considered internal or private
|
||||
# you can specify either a CIDR block or any of the special named ranges listed
|
||||
# at: https://www.elastic.co/guide/en/beats/filebeat/current/defining-processors.html#condition-network
|
||||
internal_networks:
|
||||
- private
|
||||
Reference in New Issue
Block a user