mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
Merge pull request #272 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update filebeat.yml
This commit is contained in:
@@ -72,7 +72,7 @@ filebeat.prospectors:
|
|||||||
{%- for LOGNAME in salt['pillar.get']('brologs:enabled', '') %}
|
{%- for LOGNAME in salt['pillar.get']('brologs:enabled', '') %}
|
||||||
- type: log
|
- type: log
|
||||||
paths:
|
paths:
|
||||||
- /nsm/bro/logs/current/{{ LOGNAME }}.log
|
- /nsm/zeek/logs/current/{{ LOGNAME }}.log
|
||||||
fields:
|
fields:
|
||||||
type: bro_{{ LOGNAME }}
|
type: bro_{{ LOGNAME }}
|
||||||
fields_under_root: true
|
fields_under_root: true
|
||||||
|
|||||||
Reference in New Issue
Block a user