Filebeat Cisco logs in files

Elastic Stack Beats
1

Hi!

I’m new to Filebeat, and I’d like to process some already generated ASA logs. How do I set up cisco.yml to ingest from /var/log/cisco/ instead of listening on a socket?

Thanks!

2

Set

var.input: log
var.paths:
   - <path to logs>
1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.