User submitted Cookbooks

Warning

These recipes are user submitted, please review them thoroughly before implementing them in your own environment. No one cares about your environment more than you.

• How to restart an agent after changes to the agent.conf:
  • Requirements:
  • Details:
  • rules:
  • active response configuration:
• Using filebeat, logstash, and elasticsearch:
  • Enable json alert output in ossec.conf:
  • Configure filebeat to read alerts.json in filebeat.yml:
  • Configure logstash: