Change clean_removed to true cleanup tracking of Zeek logs removed from current

This commit is contained in:
weslambert
2020-11-18 13:47:32 -05:00
committed by GitHub
parent 34fd80182e
commit 6b4af30fc1

View File

@@ -115,7 +115,7 @@ filebeat.inputs:
fields: ["source", "prospector", "input", "offset", "beat"]
fields_under_root: true
clean_removed: false
clean_removed: true
close_removed: false
- type: log