This is the documentation for Wazuh 3.2. Check out the docs for the latest version of Wazuh!


Filebeat can be used in conjunction with Wazuh Manager to send events and alerts to Logstash node, this role will install Filebeat, you can customize the installation with these variables:

  • filebeat_output_logstash_hosts: define logstash node(s) to be use (default:

Please review the references section to see all variables available for this role.