Fix zeek logs in filebeat

This commit is contained in:
Mike Reeves
2022-09-26 17:01:44 -04:00
parent ea8d9362ae
commit aa7dd47b00

View File

@@ -131,7 +131,7 @@ filebeat.inputs:
{%- if grains['role'] in ['so-eval', 'so-standalone', 'so-sensor', 'so-helix', 'so-heavynode', 'so-import'] %}
{%- if ZEEKVER != 'SURICATA' %}
{%- for LOGNAME in salt['pillar.get']('zeeklogs:enabled', '') %}
{%- for LOGNAME in salt['pillar.get']('filebeat:zeek_logs_enabled', '') %}
- type: filestream
id: zeek-{{ LOGNAME }}
paths: