Auditbeat PATH

Elastic Stack Beats
1

Hi guys
I have installed and configured َAuditbeat to check a series of specific files and folders in Windows َServer
Auditbeat works and Running
But when I add the D and E drives to Auditbeat.yml file , the service dosen't run
I don't find anything in the yaml file reference

2

What do the Auditbeat logs show?

PS - We aren't all guys :slight_smile:

3

Hi, thank you for your answer
Auditbeat for the default path works
But when I add other drives (for example, D AND E drive ), the service stops

hosts: ["192.168.1.1:5044"]
auditbeat.modules:
- module: file_integrity
  paths:
  - C:/windows
  - C:/windows/system32
  - C:/Program Files
  - C:/Program Files (x86)
4

I understand that, but we really need to see the logs from Auditbeat to provide further assistance.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.