filebeat/events

Filebeat elasticsearch connection string

This parameter defines the DRP events that should be registered for and forwarded to Filebeat.

The default is:

*.*.*

This is all events. The general form is scope.action.specific.