afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Changed opensearch comment by indexer

Browse Source
This commit is contained in:
Alberto R 2022-03-04 15:10:25 +01:00
parent 43add01612
commit 8e7aa833f6
No known key found for this signature in database
GPG Key ID: A3B78DD9E2FD8B94
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/wazuh/ansible-filebeat-oss/templates/filebeat.yml.j2
View File

@ -1,5 +1,3 @@
# Wazuh - Filebeat configuration file
# Wazuh - Filebeat configuration file # Wazuh - Filebeat configuration file
filebeat.modules: filebeat.modules:
- module: wazuh - module: wazuh
@ -14,7 +12,7 @@ setup.template.json.name: 'wazuh'
setup.template.overwrite: true setup.template.overwrite: true
setup.ilm.enabled: false setup.ilm.enabled: false
# Send events directly to Opensearch # Send events directly to Wazuh indexer
output.elasticsearch: output.elasticsearch:
hosts: hosts:
{% for item in filebeat_output_indexer_hosts %} {% for item in filebeat_output_indexer_hosts %}
@ -31,5 +29,5 @@ output.elasticsearch:
ssl.key: "{{ filebeat_ssl_dir }}/{{ filebeat_node_name }}-key.pem" ssl.key: "{{ filebeat_ssl_dir }}/{{ filebeat_node_name }}-key.pem"
{% endif %} {% endif %}
# Optional. Send events to Logstash instead of Opensearch # Optional. Send events to Logstash instead of Wazuh indexer
#output.logstash.hosts: ["YOUR_LOGSTASH_SERVER_IP:5000"] #output.logstash.hosts: ["YOUR_LOGSTASH_SERVER_IP:5000"]