Read archives events in Filebeat (#387)

Former-commit-id: cd1e0f0aa3
This commit is contained in:
AlfonsoRBJ
2020-09-24 17:48:46 +02:00
committed by GitHub
parent 5d37e1d9b4
commit 505bf046de

View File

@@ -6,6 +6,11 @@ filebeat:
- type: log - type: log
paths: paths:
- "/var/ossec/logs/alerts/alerts.json" - "/var/ossec/logs/alerts/alerts.json"
# - type: log
# paths:
# - "/var/ossec/logs/archives/archives.json"
# fields:
# wazuh_log_file: "archives"
output: output:
logstash: logstash: