Filebeat can be used in conjunction with Wazuh Manager to send events and alerts to the Wazuh indexer. This role will install Filebeat, you can customize the installation with these variables:

  • filebeat_output_indexer_hosts: This defines the indexer node(s) to be used (default:

Please review the variables references section to see all variables available for this role.