--- packetbeat/packetbeat.yml.orig 2021-10-07 17:20:31 UTC +++ packetbeat/packetbeat.yml @@ -10,8 +10,10 @@ # =============================== Network device =============================== # Select the network interface to sniff the data. On Linux, you can use the -# "any" keyword to sniff on all connected interfaces. -packetbeat.interfaces.device: any +# "any" keyword to sniff on all connected interfaces. FreeBSD is a bit different +# and the beats programmers did not bother to implement it, so you must set this +# to your preferred device +packetbeat.interfaces.device: em0 # The network CIDR blocks that are considered "internal" networks for # the purpose of network perimeter boundary classification. The valid @@ -151,6 +153,10 @@ setup.template.settings: # versions, this URL points to the dashboard archive on the artifacts.elastic.co # website. #setup.dashboards.url: + +# The directory from where to read the dashboards. The default is the `kibana` +# folder in the home path. +#setup.dashboards.directory: %%DATADIR%%/packetbeat/kibana # =================================== Kibana ===================================