Filebeat can be used in conjunction with Wazuh Manager to send events and alerts to Elasticsearch, this role will install Filebeat, you can customize the installation with these variables:

  • filebeat_output_elasticsearch_hosts: define Elasticsearch node(s) to be use (default:

Please review the references section to see all variables available for this role.