mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Merge pull request #272 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update filebeat.yml
This commit is contained in:
@@ -72,7 +72,7 @@ filebeat.prospectors:
|
||||
{%- for LOGNAME in salt['pillar.get']('brologs:enabled', '') %}
|
||||
- type: log
|
||||
paths:
|
||||
- /nsm/bro/logs/current/{{ LOGNAME }}.log
|
||||
- /nsm/zeek/logs/current/{{ LOGNAME }}.log
|
||||
fields:
|
||||
type: bro_{{ LOGNAME }}
|
||||
fields_under_root: true
|
||||
|
||||
Reference in New Issue
Block a user