How to use filebeat changes to collect the entire file

I want to use filbeat to collect configuration files, and when the file content has CRUD operations, the entire file content will be collected

Can you do this using configuration items? Like a multi-line merge

why don't consider auditbeat file integrity module https://www.elastic.co/guide/en/beats/auditbeat/master/auditbeat-module-file_integrity.html

Any change to the file would be logged by this module

I want to receive the contents of the file, not the index data. Like collecting the full amount of configuration files every time

You get the full contents of the file every time you make a change

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.