elastic.co elastic.co

Brewing in Beats: Load Auditbeat rules from a configuration directory

Welcome to Brewing in Beats! With these weekly series, we're keeping you up to date with what's new in Beats, including the latest commits and releases. Did you know that Beats 6.3 is already available? Try it and let us know what you think.  Auditbeat: load audit rules Auditbeat is getting support for loading audit rules from /etc/auditbeat/audit.rules.d/*.conf. Users can define their rules separately from the config file so that...