Start your 14-day free trial today
No Credit Card Required
Try Logit.io FreeAlready have an account? Sign In
Trend Micro
Ship Trend Micro logs to logstash
Step 1 - Configure Trend Micro to forward logs
Configure Trend Micro to send logs to TCP port 9000 of your Filebeat server.
You can consult the Trend Micro documentation to do this.
Step 2 - Install the Trend Micro certificate
Trend Micro sends data in an encrypted format.
You need to install the Trend Micro certificate on your Filebeat server.
sudo mkdir /etc/filebeat/certificates
sudo openssl req -newkey rsa:2048 -nodes \
-keyout /etc/filebeat/certificates/Trendmicro.key -x509 \
-days 365 \
-out /etc/filebeat/certificates/Trendmicro.crt
Step 3 - Configure Filebeat.yml
The configuration file below is pre-configured to send data to your Logit.io Stack.
Copy the configuration file below and overwrite the contents of the Filebeat configuration file typically located at /etc/filebeat/filebeat.yml
# ============================== Filebeat inputs ===============================
filebeat.inputs:
- type: tcp
max_message_size: 10MiB
host: "0.0.0.0:6515"
enabled: true
fields:
type:
fields_under_root: true
encoding: utf-8
ignore_older: 12h
# ================================== Outputs ===================================
output.logstash:
hosts: ["your-logstash-host:your-ssl-port"]
loadbalance: true
ssl.enabled: true
If you’re running Filebeat 7, add this code block to the end. Otherwise, you can leave it out.
# ... For Filebeat 7 only ...
filebeat.registry.path: /var/lib/filebeat
If you’re running Filebeat 6, add this code block to the end.
# ... For Filebeat 6 only ...
registry_file: /var/lib/filebeat/registry
It’s a good idea to run the configuration file through a YAML validator to rule out indentation errors, clean up extra characters, and check if your YAML file is valid. Yamllint.com is a great choice.
Step 4 - Start filebeat
Start or restart to apply the configuration changes.
Step 5 - Check Logit.io for your logs
Now you should view your logs:
If you don't see logs take a look at How to diagnose no data in Stack below for how to diagnose common issues.
Step 6 - how to diagnose no data in Stack
If you don't see data appearing in your Stack after following the steps, visit the Help Centre guide for steps to diagnose no data appearing in your Stack or Chat to support now.