paulmataruso/wazuh-docker-mirror
1
0
Fork 0
mirror of https://github.com/wazuh/wazuh-docker.git synced 2025-11-03 13:33:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed the option to change Filebeat output (#268)

Browse Source
This commit is contained in:
AlfonsoRBJ
2019-11-05 16:20:37 +01:00
committed by Jesús Linares
parent a8e0804e04
commit 910caf6bd3
2 changed files with 6 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
wazuh/config/01-wazuh.sh
View File

@@ -197,20 +197,6 @@ change_api_user_credentials() {
} }
##############################################################################
# Customize filebeat output ip
##############################################################################
custom_filebeat_output_ip() {
if [ "$FILEBEAT_OUTPUT" != "" ]; then
sed -i "s/logstash:5000/$FILEBEAT_OUTPUT:5000/" /etc/filebeat/filebeat.yml
fi
}
############################################################################## ##############################################################################
# Main function # Main function
############################################################################## ##############################################################################
@@ -255,9 +241,6 @@ main() {
# Change API user credentials # Change API user credentials
change_api_user_credentials change_api_user_credentials
# Update filebeat configuration
custom_filebeat_output_ip
# Delete temporary data folder # Delete temporary data folder
rm -rf ${WAZUH_INSTALL_PATH}/data_tmp rm -rf ${WAZUH_INSTALL_PATH}/data_tmp

6
wazuh/config/02-set_filebeat_destination.sh
View File

@@ -9,11 +9,17 @@ if [[ $FILEBEAT_DESTINATION == "elasticsearch" ]]; then
echo "FILEBEAT - Set destination to Elasticsearch" echo "FILEBEAT - Set destination to Elasticsearch"
cp filebeat_to_elasticsearch.yml /etc/filebeat/filebeat.yml cp filebeat_to_elasticsearch.yml /etc/filebeat/filebeat.yml
if [[ $FILEBEAT_OUTPUT != "" ]]; then
sed -i "s/elasticsearch:9200/$FILEBEAT_OUTPUT:9200/" /etc/filebeat/filebeat.yml
fi
elif [[ $FILEBEAT_DESTINATION == "logstash" ]]; then elif [[ $FILEBEAT_DESTINATION == "logstash" ]]; then
echo "FILEBEAT - Set destination to Logstash" echo "FILEBEAT - Set destination to Logstash"
cp filebeat_to_logstash.yml /etc/filebeat/filebeat.yml cp filebeat_to_logstash.yml /etc/filebeat/filebeat.yml
if [[ $FILEBEAT_OUTPUT != "" ]]; then
sed -i "s/logstash:5000/$FILEBEAT_OUTPUT:5000/" /etc/filebeat/filebeat.yml
fi
else else
echo "FILEBEAT - Error choosing destination. Set default filebeat.yml " echo "FILEBEAT - Error choosing destination. Set default filebeat.yml "