mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 17:52:46 +01:00
Fix Eval Event Pickup
This commit is contained in:
@@ -177,6 +177,22 @@ input {
|
|||||||
type => "bro_x509"
|
type => "bro_x509"
|
||||||
tags => ["bro"]
|
tags => ["bro"]
|
||||||
}
|
}
|
||||||
|
file {
|
||||||
|
path => "/wazuh/alerts/alerts.json"
|
||||||
|
type => "ossec"
|
||||||
|
}
|
||||||
|
file {
|
||||||
|
path => "/wazuh/archives/archive.json"
|
||||||
|
type => "ossec_archive"
|
||||||
|
}
|
||||||
|
file {
|
||||||
|
path => "/osquery/logs/result.log"
|
||||||
|
type => "osquery"
|
||||||
|
}
|
||||||
|
file {
|
||||||
|
path => "/strelka/strelka.log"
|
||||||
|
type => "strelka"
|
||||||
|
}
|
||||||
}
|
}
|
||||||
filter {
|
filter {
|
||||||
if "import" in [tags] {
|
if "import" in [tags] {
|
||||||
|
|||||||
Reference in New Issue
Block a user