fix(auditbeat-conf): fix file input

SEKOIA-IO · Feb 14, 2024 · 752dabb · 752dabb
1 parent 928afad
commit 752dabb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/xdr/features/collect/integrations/endpoint/auditbeat_linux.md b/docs/xdr/features/collect/integrations/endpoint/auditbeat_linux.md
@@ -240,7 +240,7 @@ And add a dedicated configuration file for the Auditbeat logs in `/etc/rsyslog.d
 ```bash
 module(load="imfile" PollingInterval="10")              #needs to be done just once
 input(type="imfile"
-      File="/tmp/auditbeat/auditbeat"
+      File="/tmp/auditbeat/auditbeat*.ndjson"
       Tag="linux_auditbeat"
       Severity="info"
       Facility="local7"