CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-31 04:13:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1427 from Security-Onion-Solutions/fix/wazuh_filebeat

Browse Source 
Fix Filebeat config for Wazuh
This commit is contained in:
weslambert
2020-09-30 10:59:01 -04:00
committed by GitHub
parent dac2ad5dbf d8f70397f7
commit defe832121
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/filebeat/etc/filebeat.yml
View File

@@ -203,15 +203,14 @@ filebeat.inputs:
- type: log
paths:
- /wazuh/alerts/alerts.json
- /wazuh/archives/archives.json
fields:
module: ossec
dataset: alert
category: host
processors:
- drop_fields:
fields: ["source", "prospector", "input", "offset", "beat"]
pipeline: "ossec"
fields_under_root: true
clean_removed: false
close_removed: false