Files
securityonion/salt/filebeat/modules/cef.yml.disabled
2021-05-04 10:50:13 -04:00

18 lines
526 B
Plaintext

# Module: cef
# Docs: https://www.elastic.co/guide/en/beats/filebeat/7.x/filebeat-module-cef.html
- module: cef
log:
enabled: true
var:
syslog_host: localhost
syslog_port: 9003
# Set internal security zones. used to override parsed network.direction
# based on zone egress and ingress
#var.internal_zones: [ "Internal" ]
# Set external security zones. used to override parsed network.direction
# based on zone egress and ingress
#var.external_zones: [ "External" ]