developer filebeat param reference filebeat/events Filebeat elasticsearch connection string This parameter defines the DRP events that should be registered for and forwarded to Filebeat. The default is: *.*.* This is all events. The general form is scope.action.specific.