30 lines
699 B
YAML
30 lines
699 B
YAML
---
|
|
filebeat_create_config: true
|
|
|
|
filebeat_prospectors:
|
|
- input_type: log
|
|
paths:
|
|
- "/var/ossec/logs/alerts/alerts.json"
|
|
document_type: json
|
|
json.message_key: log
|
|
json.keys_under_root: true
|
|
json.overwrite_keys: true
|
|
|
|
filebeat_output_elasticsearch_enabled: false
|
|
filebeat_output_elasticsearch_hosts:
|
|
- "localhost:9200"
|
|
|
|
filebeat_output_logstash_enabled: true
|
|
filebeat_output_logstash_hosts:
|
|
- "192.168.212.153:5000"
|
|
|
|
filebeat_enable_logging: true
|
|
filebeat_log_level: debug
|
|
filebeat_log_dir: /var/log/mybeat
|
|
filebeat_log_filename: mybeat.log
|
|
|
|
filebeat_ssl_dir: /etc/pki/logstash
|
|
filebeat_ssl_certificate_file: ""
|
|
filebeat_ssl_key_file: ""
|
|
filebeat_ssl_insecure: "false"
|