Updated filebeat config to use only odfe

wazuh · Aug 4, 2021 · 33d195a · 33d195a
1 parent 21c6f9b
commit 33d195a
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 55 deletions.
diff --git a/wazuh/config/filebeat.yml b/wazuh/config/filebeat.yml
@@ -0,0 +1,19 @@
+# Wazuh Docker Copyright (C) 2019 Wazuh Inc. (License GPLv2)
+
+# Wazuh - Filebeat configuration file
+filebeat.inputs:
+  - type: log
+    paths:
+      - '/var/ossec/logs/alerts/alerts.json'
+
+setup.template.json.enabled: true
+setup.template.json.path: "/etc/filebeat/wazuh-template.json"
+setup.template.json.name: "wazuh"
+setup.template.overwrite: true
+
+
+output.elasticsearch:
+  hosts: ['http://odfe:9200']
+  #pipeline: geoip
+  indices:
+    - index: 'wazuh-alerts-4.x-%{+yyyy.MM.dd}'
diff --git a/wazuh/config/filebeat_to_elasticsearch.yml b/wazuh/config/filebeat_to_elasticsearch.yml