search

elastic / examples

Home for Elasticsearch examples available to everyone. It's a great way to get started.
Apache License 2.0
2.64k stars 1.24k forks source link

SIEM at Home example updates #294

Closed rwaight closed 4 years ago

rwaight commented 4 years ago

SIEM at Home example updates:

  1. Update beats-general-config.yml - Comment out the add_cloud_metadata processor within the Beats general configuration. Add comments to the when.network.source.ip and when.network.destination.ip sections.
  2. Create beats-on-macOS/auditbeat.yml - Initial Auditbeat example for Beats on MacOS
  3. Create beats-on-macOS/packetbeat.yml - Initial Packetbeat example for Beats on MacOS