Skip to content

Instantly share code, notes, and snippets.

@Cyb3rWard0g

Cyb3rWard0g/ksql_demo.yml

Last active December 18, 2018 22:32
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Cyb3rWard0g/830e46ddb2aafff877e6fa83fac34a91 to your computer and use it in GitHub Desktop.
Save Cyb3rWard0g/830e46ddb2aafff877e6fa83fac34a91 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ksql_demo.yml
# HELK KSQL Winlogbeat Config - Blog
# Author: Roberto Rodriguez (@Cyb3rWard0g)
# License: GPL-3.0
winlogbeat.event_logs:
- name: Microsoft-windows-sysmon/operational
ignore_older: 4h
#----------------------------- Kafka output --------------------------------
output.kafka:
# initial brokers for reading cluster metadata
hosts: ["192.168.64.138:9092"]
topic: "winlogbeat"
############################# HELK Optimizing Latency ######################
max_retries: 2
max_message_bytes: 1000000
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment