I know this has to be something simple, but im staring at it and cant figure it out, so im posting here for some extra eyes to tell me what i did wrong.
ERROR
Exiting: Error while initializing input: required 'object', but found 'string' in field 'filebeat.inputs.0.fields' (source:'/etc/filebeat/filebeat.yml')
CONFIG
filebeat.inputs:
- type: log
enabled: true
paths:
- /opt/bro/logs/current/conn.log
fields:
type:bro-conn
fields_under_root: true
What am I missing?