Fix Eval Event Pickup x2

This commit is contained in:
Mike Reeves
2020-01-30 16:16:21 -05:00
parent 5c64d19c01
commit 1e0d0d74e1

View File

@@ -241,6 +241,10 @@ so-logstash:
{%- if grains['role'] == 'so-eval' %}
- /nsm/bro:/nsm/bro:ro
- /opt/so/log/suricata:/suricata:ro
- /opt/so/wazuh/logs/alerts/:/wazuh/alerts:ro
- /opt/so/wazuh/logs/archives/:/wazuh/archives:ro
- /opt/so/log/fleet/:/osquery/logs:ro
- /opt/so/log/strelka:/strelka:ro
{%- endif %}
- watch:
- file: /opt/so/conf/logstash/etc