I am building beats on MacOS for the native integration feature, I have successfully built & deployed auditbeat, and during the build process I was able to find the file which the build was using in the template.
File looks like
However, in the packetbeat directory, no such file exists.
To anyone who has built a beat from source, where do you find the packetbeat.yml source file that the build will use? Logs have shown that the source file is in the packetbeat.tar.gz file, but when I edit and rebuild, it goes back to the stock configuration.
packetbeat.yml file in the base directory as well as
build/package/packebeat-darwin-amd64.tar.gz/packetbeat.yml does nothing.
Anyone know where else I should look?
Screenshots of the directories attached below
Screenshot of auditbeat build directory:
Screenshot of packebeat build directory: