cowrie/docs/elk/filebeat-cowrie.conf

22 lines
437 B
Plaintext

filebeat:
prospectors:
-
paths:
- /home/cowrie/cowrie/log/cowrie.json*
encoding: plain
input_type: log
document_type: cowrie
registry_file: /var/lib/filebeat/registry
output:
logstash:
hosts: ["10.10.0.11:5044"]
shipper:
logging:
to_syslog: false
to_files: true
files:
path: /var/log/filebeat/
name: mybeat
rotateeverybytes: 10485760 # = 10MB
keepfiles: 7
level: info