83 lines
2.5 KiB
Plaintext
83 lines
2.5 KiB
Plaintext
|
[id="configuring-howto-{beatname_lc}"]
|
|||
|
|
= Configuring {beatname_uc}
|
|||
|
|
|
|||
|
|
[partintro]
|
|||
|
|
--
|
|||
|
|
Before modifying configuration settings, make sure you've completed the
|
|||
|
|
<<{beatname_lc}-configuration,configuration steps>> in the Getting Started.
|
|||
|
|
This section describes some common use cases for changing configuration options.
|
|||
|
|
|
|||
|
|
To configure {beatname_uc}, you edit the configuration file. For rpm and deb,
|
|||
|
|
you’ll find the configuration file at +/etc/{beatname_lc}/{beatname_lc}.yml+.
|
|||
|
|
There's also a full example configuration file at
|
|||
|
|
+/etc/{beatname_lc}/{beatname_lc}.reference.yml+ that shows all non-deprecated
|
|||
|
|
options. For mac and win, look in the archive that you extracted.
|
|||
|
|
|
|||
|
|
The {beatname_uc} configuration file uses http://yaml.org/[YAML] for its syntax.
|
|||
|
|
See the {libbeat}/config-file-format.html[Config File Format] section of the
|
|||
|
|
_Beats Platform Reference_ for more about the structure of the config file.
|
|||
|
|
|
|||
|
|
The following topics describe how to configure {beatname_uc}:
|
|||
|
|
|
|||
|
|
* <<configuration-{beatname_lc}>>
|
|||
|
|
* <<configuration-general-options>>
|
|||
|
|
* <<{beatname_lc}-configuration-reloading>>
|
|||
|
|
* <<configuring-internal-queue>>
|
|||
|
|
* <<configuring-output>>
|
|||
|
|
* <<configuration-ssl>>
|
|||
|
|
* <<filtering-and-enhancing-data>>
|
|||
|
|
* <<configuring-ingest-node>>
|
|||
|
|
* <<configuration-path>>
|
|||
|
|
* <<setup-kibana-endpoint>>
|
|||
|
|
* <<configuration-dashboards>>
|
|||
|
|
* <<configuration-template>>
|
|||
|
|
* <<configuration-logging>>
|
|||
|
|
* <<using-environ-vars>>
|
|||
|
|
* <<yaml-tips>>
|
|||
|
|
* <<regexp-support>>
|
|||
|
|
* <<http-endpoint>>
|
|||
|
|
* <<{beatname_lc}-reference-yml>>
|
|||
|
|
|
|||
|
|
After changing configuration settings, you need to restart {beatname_uc} to
|
|||
|
|
pick up the changes.
|
|||
|
|
|
|||
|
|
--
|
|||
|
|
|
|||
|
|
include::./auditbeat-modules-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::./auditbeat-general-options.asciidoc[]
|
|||
|
|
|
|||
|
|
include::./reload-configuration.asciidoc[]
|
|||
|
|
|
|||
|
|
:allplatforms:
|
|||
|
|
include::../../libbeat/docs/queueconfig.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/outputconfig.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-ssl-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::./auditbeat-filtering.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-config-ingest.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-path-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-kibana-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/setup-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/loggingconfig.asciidoc[]
|
|||
|
|
|
|||
|
|
:standalone:
|
|||
|
|
include::../../libbeat/docs/shared-env-vars.asciidoc[]
|
|||
|
|
|
|||
|
|
:standalone:
|
|||
|
|
:allplatforms:
|
|||
|
|
include::../../libbeat/docs/yaml.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/regexp.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/http-endpoint.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/reference-yml.asciidoc[]
|