Update 1000_nessus_process_file.conf

logstash/1000_nessus_process_file.conf

@@ -4,6 +4,7 @@
 # Version 0.3
 # Description: Take in nessus reports from vulnWhisperer and pumps into logstash
 
+
 input {
   file {
     path => "/opt/vulnwhisperer/nessus/**/*"
@@ -33,7 +34,8 @@ filter {
       separator => ","
       source => "message"
     }
-
+    
+    #If using filebeats as your source, you will need to replace the "path" field to "source"
     grok {
       match => { "path" => "(?<scan_name>[a-zA-Z0-9_.\-]+)_%{INT:scan_id}_%{INT:history_id}_%{INT:last_updated}.csv$" }
       tag_on_failure => []