Filebeat can be used in conjunction with Wazuh Manager to send events and alerts to Logstash node, this role will install Filebeat, you can customize the installation with these variables:

  • filebeat_output_logstash_hosts: define logstash node(s) to be use (default:

Please review the references section to see all variables available for this role.