I have couple of questions with Packetbeat.
I am trying to implement Packetbeat to sniff traffic on my network so that we can feed the collected data to a analytics platform. I have a span port configured on our network which is connected to the server on which Packetbeat is installed. I am able to see the data coming in to packetbeat and I want to write that to flat file. I am currently using packetbeat's File Output but I find it limited with respect to options it provides ( I could be completely wrong as I may not know other options it has)
- Can you please tell me if there is a way to specify Date and Time in the fileaname like (%MMDDYYYY)
- Can you please tell me if there is an option so that we can compress the Packetbeat file output ? I am generating over 1GB of data every hour and I will it might be a good idea to compress it.
The output options I have chosen are as below.
Thank you very much.