mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Change clean_removed to true cleanup tracking of Zeek logs removed from current
This commit is contained in:
@@ -115,7 +115,7 @@ filebeat.inputs:
|
||||
fields: ["source", "prospector", "input", "offset", "beat"]
|
||||
|
||||
fields_under_root: true
|
||||
clean_removed: false
|
||||
clean_removed: true
|
||||
close_removed: false
|
||||
|
||||
- type: log
|
||||
|
||||
Reference in New Issue
Block a user