LinuxEventsCollection

Linux Events Collection Linux

Details

IDLinuxEventsCollection
OSLinux
Profile TypeSTANDARD
From XDR Version3.5.0
Supported Modulesxsiam

Source

LinuxEventsCollection.yml LinuxEventsCollection.json
Download History Raw 
filebeat.inputs:
- type: filestream
  enabled: true
  paths:
  - /var/log/syslog
  - /var/log/auth.log
  - /var/log/messages
  - /var/log/secure
  processors:
  - add_fields:
      fields:
        vendor: linux
        product: linux
supportedModules:
- xsiam