Capturing http.response/sequest.body.content of elasticsearch traffic


(Michael Frey) #1

What do I have to Configure to enable packetbeat to capture the full body of an elasticsearch request or response?

I know I have to set

include_body_for:

but I don´t know what kind of config I need.
Can anybody help me?