Ignore audit fileset on macOS (#3923)

Fixes #3918
elastic · Apr 5, 2017 · 4d89a03 · 4d89a03
1 parent 30d9baa
commit 4d89a03
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/filebeat/module/system/audit/manifest.yml b/filebeat/module/system/audit/manifest.yml
@@ -4,7 +4,7 @@ var:
   - name: paths
     default:
       - /var/log/audit/audit.log*
-    os.darwin: []
+    os.darwin: [""]
     os.windows: []
 
 ingest_pipeline: ingest/pipeline.json