filebeat

Filebeat cookbook

This cookbook installs and configures Filebeat on the specified node.

Attributes

• files.rb: initialize needed file names to install Filebeat
• paths.rb: initialize some main paths
• versions.rb: initialize versions for Wazuh and ELK
• filebeat.yml.rb: customize YAML configuration file for Filebeat

Usage

See wazuh-manager cookbook documentation.

Recipes

default.rb

Declares all recipes in the cookbook and installs Filebeat.

repository.rb

Append to repository path the URL and GPG key of Filebeat

filebeat.rb

• Install the package Filebeats
• Create the configuration of /etc/filebeat/filebeat.yml with defined attributes in the attributes folder
• Download the alerts template for Elasticsearch
• Download the Wazuh module for Filebeat

References

Check Filebeat installation documentation for more detail