From 32e1b40f9c087bb0a16097bfe9acfb16fce36998 Mon Sep 17 00:00:00 2001 From: Marius Iversen Date: Mon, 14 Jun 2021 11:32:36 +0200 Subject: [PATCH 1/2] fixing some typos in the default oracle config, and adding default values --- x-pack/filebeat/filebeat.reference.yml | 2 +- x-pack/filebeat/module/oracle/_meta/config.yml | 2 +- x-pack/filebeat/module/oracle/database_audit/manifest.yml | 5 ++++- x-pack/filebeat/modules.d/oracle.yml.disabled | 2 +- 4 files changed, 7 insertions(+), 4 deletions(-) diff --git a/x-pack/filebeat/filebeat.reference.yml b/x-pack/filebeat/filebeat.reference.yml index 3a89edfe1aa4..6cb813629dd4 100644 --- a/x-pack/filebeat/filebeat.reference.yml +++ b/x-pack/filebeat/filebeat.reference.yml @@ -1759,7 +1759,7 @@ filebeat.modules: # Set paths for the log files when file input is used. # Should only be used together with file input - # var.paths: /home/user/oracleauditlogs/*.aud + #var.paths: ["/home/user/oracleauditlogs/*.aud"] #------------------------------- Osquery Module ------------------------------- - module: osquery diff --git a/x-pack/filebeat/module/oracle/_meta/config.yml b/x-pack/filebeat/module/oracle/_meta/config.yml index 89485db77f67..7b1f569b835c 100644 --- a/x-pack/filebeat/module/oracle/_meta/config.yml +++ b/x-pack/filebeat/module/oracle/_meta/config.yml @@ -7,4 +7,4 @@ # Set paths for the log files when file input is used. # Should only be used together with file input - # var.paths: /home/user/oracleauditlogs/*.aud + #var.paths: ["/home/user/oracleauditlogs/*.aud"] diff --git a/x-pack/filebeat/module/oracle/database_audit/manifest.yml b/x-pack/filebeat/module/oracle/database_audit/manifest.yml index 6e2a4e1e7d9a..f297355c48cd 100644 --- a/x-pack/filebeat/module/oracle/database_audit/manifest.yml +++ b/x-pack/filebeat/module/oracle/database_audit/manifest.yml @@ -1,6 +1,9 @@ module_version: 1.0 var: + - name: paths + default: + - /home/user/oracleauditlogs/*.aud - name: tags default: [oracle-database-audit] - name: input @@ -8,4 +11,4 @@ var: ingest_pipeline: - ingest/pipeline.yml -input: config/config.yml +input: config/config.yml \ No newline at end of file diff --git a/x-pack/filebeat/modules.d/oracle.yml.disabled b/x-pack/filebeat/modules.d/oracle.yml.disabled index 0a7819e55dec..d8b1d8c58e2d 100644 --- a/x-pack/filebeat/modules.d/oracle.yml.disabled +++ b/x-pack/filebeat/modules.d/oracle.yml.disabled @@ -10,4 +10,4 @@ # Set paths for the log files when file input is used. # Should only be used together with file input - # var.paths: /home/user/oracleauditlogs/*.aud + #var.paths: ["/home/user/oracleauditlogs/*.aud"] From 8b8cc99e462a8104d80ccbb7916371ba86c07775 Mon Sep 17 00:00:00 2001 From: Marius Iversen Date: Mon, 14 Jun 2021 11:36:02 +0200 Subject: [PATCH 2/2] adding changelog entry --- CHANGELOG.next.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 40506f5bbbf2..4b5a9477d4c0 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -275,6 +275,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Fix integer overflow in S3 offsets when collecting very large files. {pull}22523[22523] - Fix CredentialsJSON unpacking for `gcp-pubsub` and `httpjson` inputs. {pull}23277[23277] - Fix issue with m365_defender, when parsing incidents that has no alerts attached: {pull}25421[25421] +- Fix default config template values for paths on oracle module: {pull}26276[26276] *Filebeat*