Mike Simos

Update auditbeat docs for systemd to add LimitNOFILE to systemd service

4

The current docs only talk about macOS when getting "too many open files": https://www.elastic.co/guide/en/beats/auditbeat/master/ulimit.html However this can also be an issue with systemd as it only applies the default 1024....

If source is an array iterate through array

1

Currently the geoip filter takes either only one 1 IP or if its an array takes the first element into the array: https://github.com/logstash-plugins/logstash-filter-geoip/blob/1d0c9c438ba3d767f7b7041fb3db90336299c062/lib/logstash/filters/geoip.rb#L44 ``` # The field containing the IP...