Changeset View
Changeset View
Standalone View
Standalone View
sysutils/beats/files/patch-packetbeat_packetbeat.yml
--- packetbeat/packetbeat.yml.orig 2017-02-09 16:20:52.000000000 +0100 | --- packetbeat/packetbeat.yml.orig 2019-10-15 21:08:29 UTC | ||||
+++ packetbeat/packetbeat.yml 2017-02-21 02:04:13.919394000 +0100 | +++ packetbeat/packetbeat.yml | ||||
@@ -10,8 +10,10 @@ | @@ -10,8 +10,10 @@ | ||||
#============================== Network device ================================ | #============================== Network device ================================ | ||||
# Select the network interface to sniff the data. On Linux, you can use the | # Select the network interface to sniff the data. On Linux, you can use the | ||||
-# "any" keyword to sniff on all connected interfaces. | -# "any" keyword to sniff on all connected interfaces. | ||||
-packetbeat.interfaces.device: any | -packetbeat.interfaces.device: any | ||||
+# "any" keyword to sniff on all connected interfaces. FreeBSD is a bit different | +# "any" keyword to sniff on all connected interfaces. FreeBSD is a bit different | ||||
+# and the beats programmers did not bother to implement it, so you must set this | +# and the beats programmers did not bother to implement it, so you must set this | ||||
+# to your preferred device | +# to your preferred device | ||||
+packetbeat.interfaces.device: em0 | +packetbeat.interfaces.device: em0 | ||||
#================================== Flows ===================================== | #================================== Flows ===================================== | ||||
@@ -147,3 +149,5 @@ | @@ -217,6 +219,8 @@ processors: | ||||
# To enable all selectors use ["*"]. Examples of other selectors are "beat", | # To enable all selectors use ["*"]. Examples of other selectors are "beat", | ||||
# "publish", "service". | # "publish", "service". | ||||
#logging.selectors: ["*"] | #logging.selectors: ["*"] | ||||
+logging.to_syslog: true | +logging.to_syslog: true | ||||
+logging.to_files: false | +logging.to_files: false | ||||
#============================== Xpack Monitoring =============================== | |||||
# packetbeat can export internal metrics to a central Elasticsearch monitoring |