mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 01:32:47 +01:00
Change clean_removed to true cleanup tracking of Zeek logs removed from current
This commit is contained in:
@@ -115,7 +115,7 @@ filebeat.inputs:
|
|||||||
fields: ["source", "prospector", "input", "offset", "beat"]
|
fields: ["source", "prospector", "input", "offset", "beat"]
|
||||||
|
|
||||||
fields_under_root: true
|
fields_under_root: true
|
||||||
clean_removed: false
|
clean_removed: true
|
||||||
close_removed: false
|
close_removed: false
|
||||||
|
|
||||||
- type: log
|
- type: log
|
||||||
|
|||||||
Reference in New Issue
Block a user