CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix Filebeat config for Wazuh

Browse Source
This commit is contained in:
Wes Lambert
2020-09-30 14:57:56 +00:00
parent dac2ad5dbf
commit d8f70397f7
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/filebeat/etc/filebeat.yml
View File

@@ -203,15 +203,14 @@ filebeat.inputs:
- type: log - type: log
paths: paths:
- /wazuh/alerts/alerts.json - /wazuh/archives/archives.json
fields: fields:
module: ossec module: ossec
dataset: alert
category: host category: host
processors: processors:
- drop_fields: - drop_fields:
fields: ["source", "prospector", "input", "offset", "beat"] fields: ["source", "prospector", "input", "offset", "beat"]
pipeline: "ossec"
fields_under_root: true fields_under_root: true
clean_removed: false clean_removed: false
close_removed: false close_removed: false