Attention This documentation does not apply to the most recent version of Wazuh. Check out the docs for the latest version.

Filebeat

Filebeat can be used in conjunction with Wazuh Manager to send events and alerts to Elasticsearch, this role will install Filebeat, you can customize the installation with these variables:

filebeat_output_elasticsearch_hosts: define Elasticsearch node(s) to be use (default: 127.0.0.1:9200).

Please review the references section to see all variables available for this role.