File: //etc/filebeat/modules.d/osquery.yml.disabled
# Module: osquery
# Docs: https://www.elastic.co/guide/en/beats/filebeat/8.11/filebeat-module-osquery.html
- module: osquery
result:
enabled: false
# Set custom paths for the log files. If left empty,
# Filebeat will choose the paths depending on your OS.
#var.paths:
# If true, all fields created by this module are prefixed with
# `osquery.result`. Set to false to copy the fields in the root
# of the document. The default is true.
#var.use_namespace: true