Needs to drop audit beat data

Elastic Stack Logstash
1

Hello Team,

Have configured the auditbeat with file integraity module to capture the folder/file date and time change.

In the same server have configured the filebeat to capture the application logs.

both beats output configured to logstash.

from logtsash configuration how can filter only filebeat data needs to process, and drop auditbeat data.
Please help me.

2

Hello Team,

Please assist to configure the logstash filter condition for beats.
Is there any way to mention the beats id in input logstash configuration?

Is the beats is common for multiple servers?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.