BPF filter is empty

Elastic Stack Beats
1

Hi Guys,

I try to set up packet beat up and runing on a windows 2012 r2 server.
The problem is that the bpf filter is empty, no matter with port i define in packetbeat.protocols.
Here are my config

packetbeat.interfaces.device: 0

packetbeat.flows:
timeout: 30s
period: 10s

packetbeat.protocols.dns:
ports: [53]
include_authorities: true
include_additionals: true

setup.template.settings:
index.number_of_shards: 1

Thanks for your help!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.