I want to use filbeat to collect configuration files, and when the file content has CRUD operations, the entire file content will be collected
Can you do this using configuration items? Like a multi-line merge
why don't consider auditbeat file integrity module https://www.elastic.co/guide/en/beats/auditbeat/master/auditbeat-module-file_integrity.html
Any change to the file would be logged by this module
I want to receive the contents of the file, not the index data. Like collecting the full amount of configuration files every time
You get the full contents of the file every time you make a change
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.