32 lines
625 B
YAML
32 lines
625 B
YAML
|
|
# Wazuh - Filebeat configuration file
|
|
filebeat.modules:
|
|
- module: wazuh
|
|
alerts:
|
|
enabled: true
|
|
archives:
|
|
enabled: false
|
|
|
|
setup.template.json.enabled: true
|
|
setup.template.json.path: '/etc/filebeat/wazuh-template.json'
|
|
setup.template.json.name: 'wazuh'
|
|
setup.template.overwrite: true
|
|
setup.ilm.enabled: false
|
|
output.elasticsearch:
|
|
hosts: ['https://wazuh.indexer:9200']
|
|
#username:
|
|
#password:
|
|
#ssl.verification_mode:
|
|
#ssl.certificate_authorities:
|
|
#ssl.certificate:
|
|
#ssl.key:
|
|
|
|
logging.metrics.enabled: false
|
|
|
|
seccomp:
|
|
default_action: allow
|
|
syscalls:
|
|
- action: allow
|
|
names:
|
|
- rseq
|