afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update Filebeat for XPack Security

Browse Source
This commit is contained in:
Jose M 2019-07-01 15:51:23 +02:00
parent 6cffed9218
commit 3ff5a194df
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
roles/wazuh/ansible-filebeat/templates/filebeat.yml.j2
View File

@ -53,6 +53,15 @@ output.elasticsearch:
#pipeline: geoip #pipeline: geoip
indices: indices:
- index: 'wazuh-alerts-3.x-%{+yyyy.MM.dd}' - index: 'wazuh-alerts-3.x-%{+yyyy.MM.dd}'
{% if filebeat_xpack_security %}
username: {{ elasticsearch_user }}
password: {{ elasticsearch_password }}
protocol: https
ssl.certificate_authorities:
- {{node_certs_destination}}/ca.crt
ssl.certificate: "{{node_certs_destination}}/{{ filebeat_node_name }}.crt"
ssl.key: "{{node_certs_destination}}/{{ filebeat_node_name }}.key"
{% endif %}
# Optional. Send events to Logstash instead of Elasticsearch # Optional. Send events to Logstash instead of Elasticsearch
#output.logstash.hosts: ["YOUR_LOGSTASH_SERVER_IP:5000"] #output.logstash.hosts: ["YOUR_LOGSTASH_SERVER_IP:5000"]