logstash.conf read error? about wazuh-docker

[jlruizmlg]

Hi, @RANGERBEE I think you are mixing configurations, you don't need to modify the Docker file from Logstash to add new settings.

With the following code in your docker-compose.yml you can mount the folder ./logstash/config in the logstash container /etc/logstash/conf.d

    volumes:
      - ./logstash/config:/etc/logstash/conf.d:Z

So, put your new config file in ./logstash/config and then run the docker-compose, this should works.

On the hand, please review your syntax you have a . at the end of your local folder path.

 volumes:
      - ./logstash/config/.:/etc/logstash/conf.d:Z

Thanks, will work on it again next week, will keep u posted.

scrapped this idea. please disregard - closing...