$OpenBSD: patch-packetbeat_packetbeat_yml,v 1.3 2020/11/21 15:58:41 pvk Exp $

'any' interface doesn't work on non-Linux

Index: packetbeat/packetbeat.yml
--- packetbeat/packetbeat.yml.orig
+++ packetbeat/packetbeat.yml
@@ -11,7 +11,7 @@
 
 # Select the network interface to sniff the data. On Linux, you can use the
 # "any" keyword to sniff on all connected interfaces.
-packetbeat.interfaces.device: any
+packetbeat.interfaces.device: em0
 
 # =================================== Flows ====================================
 
@@ -210,10 +210,10 @@ processors:
     then:
       - drop_fields:
           fields: [host]
-    else:
-      - add_host_metadata: ~
-  - add_cloud_metadata: ~
-  - add_docker_metadata: ~
+  #  else:
+  #    - add_host_metadata: ~
+  #- add_cloud_metadata: ~
+  #- add_docker_metadata: ~
 
 # ================================== Logging ===================================
 
