[Oracle] Fixing default values for paths in config template (#26276) (#…

…26281)

* fixing some typos in the default oracle config, and adding default values

* adding changelog entry

(cherry picked from commit 81e5cc0)

Co-authored-by: Marius Iversen <marius.iversen@elastic.co>

CHANGELOG.next.asciidoc

@@ -224,6 +224,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Fix o365 module config when client_secret contains special characters. {issue}25058[25058]
 - Fix issue with m365_defender, when parsing incidents that has no alerts attached: {pull}25421[25421]
 - Improve inode reuse handling by removing state for removed files more eagerly from the internal state table in the logs inputs. {pull}25756[25756]
+- Fix default config template values for paths on oracle module: {pull}26276[26276]
 
 *Filebeat*
 

x-pack/filebeat/filebeat.reference.yml

@@ -1759,7 +1759,7 @@ filebeat.modules:
 
     # Set paths for the log files when file input is used.
     # Should only be used together with file input
-    # var.paths: /home/user/oracleauditlogs/*.aud
+    #var.paths: ["/home/user/oracleauditlogs/*.aud"]
 
 #------------------------------- Osquery Module -------------------------------
 - module: osquery

x-pack/filebeat/module/oracle/_meta/config.yml

@@ -7,4 +7,4 @@
 
     # Set paths for the log files when file input is used.
     # Should only be used together with file input
-    # var.paths: /home/user/oracleauditlogs/*.aud
+    #var.paths: ["/home/user/oracleauditlogs/*.aud"]

x-pack/filebeat/module/oracle/database_audit/manifest.yml

@@ -1,11 +1,14 @@
 module_version: 1.0
 
 var:
+  - name: paths
+    default:
+      - /home/user/oracleauditlogs/*.aud
   - name: tags
     default: [oracle-database-audit]
   - name: input
     default: file
 
 ingest_pipeline:
   - ingest/pipeline.yml
-input: config/config.yml
+input: config/config.yml

x-pack/filebeat/modules.d/oracle.yml.disabled

@@ -10,4 +10,4 @@
 
     # Set paths for the log files when file input is used.
     # Should only be used together with file input
-    # var.paths: /home/user/oracleauditlogs/*.aud
+    #var.paths: ["/home/user/oracleauditlogs/*.aud"]