Filebeat

Filebeat can be used in conjunction with ThreatLockDown Manager to send events and alerts to the ThreatLockDown indexer. This role will install Filebeat, you can customize the installation with these variables:

• filebeat_output_indexer_hosts: This defines the indexer node(s) to be used (default: 127.0.0.1:9200).

Please review the variables references section to see all variables available for this role.