Merge pull request #1634 from SEKOIA-IO/fix/auditbeat-conf

fix(auditbeat-conf): fix file input
SEKOIA-IO · Feb 14, 2024 · b9669cd · b9669cd
2 parents 928afad + 752dabb
commit b9669cd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/xdr/features/collect/integrations/endpoint/auditbeat_linux.md b/docs/xdr/features/collect/integrations/endpoint/auditbeat_linux.md
@@ -240,7 +240,7 @@ And add a dedicated configuration file for the Auditbeat logs in `/etc/rsyslog.d
 ```bash
 module(load="imfile" PollingInterval="10")              #needs to be done just once
 input(type="imfile"
-      File="/tmp/auditbeat/auditbeat"
+      File="/tmp/auditbeat/auditbeat*.ndjson"
       Tag="linux_auditbeat"
       Severity="info"
       Facility="local7"