New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Filebeat elasticsearch hosts as a list #1071

Open

mzaghab-vp opened this issue Jul 22, 2024 · 0 comments

mzaghab-vp commented Jul 22, 2024

According to the wazuh documentation, the indexer list passed to the filebeat server may be one or more host, but the wazuh module doesn't accept more than one indexer host:port
wazuh docs : https://documentation.wazuh.com/current/installation-guide/wazuh-server/step-by-step.html#configuring-filebeat
filebeat template : https://github.com/wazuh/wazuh-puppet/blob/master/templates/filebeat_oss_yml.erb#L16
Is there a way to override this config to be able to pass a list of hosts instead of one indexer by filebeat ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment