diff --git a/salt/logstash/files/dynamic/0008_input_eval.conf b/salt/logstash/files/dynamic/0008_input_eval.conf index b2850a984..b02f9d516 100644 --- a/salt/logstash/files/dynamic/0008_input_eval.conf +++ b/salt/logstash/files/dynamic/0008_input_eval.conf @@ -177,6 +177,22 @@ input { type => "bro_x509" tags => ["bro"] } + file { + path => "/wazuh/alerts/alerts.json" + type => "ossec" + } + file { + path => "/wazuh/archives/archive.json" + type => "ossec_archive" + } + file { + path => "/osquery/logs/result.log" + type => "osquery" + } + file { + path => "/strelka/strelka.log" + type => "strelka" + } } filter { if "import" in [tags] {