Threat intelligence module

Elastic Stack Kibana
1

Hi there! Alert for a maybe, a stupid question.
I want to enable the thread intelligence module from diferent resources. I click enable in Kibana and go to the documentation:

image
image671×612 39.8 KB

My question is, where I put this config/modules config? in the kibana.yml file?
I don't find the solution. I tried to put the config in diferent config files but doesn't work properly. Could you please give some light?

And sorry for the question if it is very basic :S

2

The threat intelligence module is part of Filebeat, Threat Intel module | Filebeat Reference [7.14] | Elastic. You'll need to install Filebeat and then configure the module there.

3

And it's possible to enable this threat intelligence modules in the filebeat that runs in the elastic agent?
In the 7.14 release I migrated all the filebeats to elastic agents.

4

I don't think the threat Intel module had been migrated to the elastic agent yet. But it should be soon.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.