Change clean_removed to true cleanup tracking of Zeek logs removed from current

This commit is contained in:
weslambert
2020-11-18 13:47:32 -05:00
committed by GitHub
parent 34fd80182e
commit 6b4af30fc1

View File

@@ -115,7 +115,7 @@ filebeat.inputs:
fields: ["source", "prospector", "input", "offset", "beat"] fields: ["source", "prospector", "input", "offset", "beat"]
fields_under_root: true fields_under_root: true
clean_removed: false clean_removed: true
close_removed: false close_removed: false
- type: log - type: log