# Module: suricata # Docs: https://www.elastic.co/guide/en/beats/filebeat/7.x/filebeat-module-suricata.html - module: suricata # All logs eve: enabled: true var.paths: ["/nsm/suricata/eve*.json"] # Set custom paths for the log files. If left empty, # Filebeat will choose the paths depending on your OS. #var.paths: