--- packetbeat/packetbeat.yml.orig 2017-02-09 16:20:52.000000000 +0100 +++ packetbeat/packetbeat.yml 2017-02-21 02:04:13.919394000 +0100 @@ -10,8 +10,10 @@ #============================== Network device ================================ # Select the network interface to sniff the data. On Linux, you can use the -# "any" keyword to sniff on all connected interfaces. -packetbeat.interfaces.device: any +# "any" keyword to sniff on all connected interfaces. FreeBSD is a bit different +# and the beats programmers did not bother to implement it, so you must set this +# to your preferred device +packetbeat.interfaces.device: em0 #================================== Flows ===================================== @@ -147,3 +149,5 @@ # To enable all selectors use ["*"]. Examples of other selectors are "beat", # "publish", "service". #logging.selectors: ["*"] +logging.to_syslog: true +logging.to_files: false