vault-es-audit/filebeat.yml
Knut Ahlers 549a273141
Initial version
Signed-off-by: Knut Ahlers <knut@ahlers.me>
2018-01-13 18:08:48 +01:00

28 lines
481 B
YAML

---
filebeat.prospectors:
- type: log
enabled: true
paths:
- /var/log/vault/*.log
json.keys_under_root: true
json.overwrite_keys: true
output.elasticsearch:
hosts:
- ${HOST}
protocol: ${PROTOCOL:http}
username: ${USERNAME:}
password: ${PASSWORD:}
index: "vault-audit-%{+yyyy.MM.dd}"
path.home: /opt/filebeat
setup.template.enabled: true
setup.template.name: "vault-audit"
setup.template.pattern: "vault-audit-*"
setup.template.overwrite: true
...