Filebeat

Filebeat can be used in conjunction with Wazuh Manager to send events and alerts to Logstash node, this role will install Filebeat, you can customize the installation with these variables:

  • filebeat_output_logstash_hosts: define logstash node(s) to be use (default: 127.0.0.1:5000).

Please review the references section to see all variables available for this role.