From ba4d2c9997062ec14e43fc9a8ad6c22823243ba5 Mon Sep 17 00:00:00 2001 From: Lee VanGinkel Date: Fri, 15 Sep 2023 10:46:25 -0400 Subject: [PATCH] adding the filebeat template. --- roles/telemetry/templates/filebeat.yml.j2 | 28 +++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 roles/telemetry/templates/filebeat.yml.j2 diff --git a/roles/telemetry/templates/filebeat.yml.j2 b/roles/telemetry/templates/filebeat.yml.j2 new file mode 100644 index 0000000..07cf9b0 --- /dev/null +++ b/roles/telemetry/templates/filebeat.yml.j2 @@ -0,0 +1,28 @@ +## This filebeat template is not used in the current playbook. +## The current playbook uses the filebeat template in the mdd-base +## Telemetry directory. To pass this file, you need to change the +## The install_elastic.yml in the tasks folder. +filebeat.config.modules: + enabled: true + path: ${path.config}/modules.d/*.yml + +filebeat.modules: + - module: netflow + log: + enabled: true + var.netflow_host: "0.0.0.0" + var.netflow_port: 2055 + +setup.kibana: + host: "http://kibana:5601" + username: "elastic" + password: "changeme" + dashboards: + enabled: true + +output.elasticsearch: + hosts: ["https://es01:9200"] + username: "elastic" + password: "changeme" + ssl.enabled: true + ssl.certificate_authorities: "certs/ca/ca.crt" \ No newline at end of file