Adding site error logs to elastic stack

[Shorthills (David Andrew Wank)]

Hi,
New user here.
My installation is properly pulling error logs from: /var/log/nginx/error.log*

But how do I make it so it also pulls the individual error log data from the sites as in this pattern:
/var/log/nginx/*.error.log

Thanks

[stephenb (Stephen Brown)]

You can go into the modules.d/nginx.yml and set the paths

- module: nginx
  # Access logs
  access:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    #var.paths:

  # Error logs
  error:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths: ["/path/to/log/nginx/error.log*", "/var/log/nginx/*.error.log"]

Nginx module | Filebeat Reference [8.0] | Elastic

[Shorthills (David Andrew Wank)]

Thank you. What's the full path? Sorry - the last time I used Elastic you had separate filebeat and metricbeat configs.

[stephenb (Stephen Brown)]

Sorry, I'm confused Are you using Elastic Agent? Or Filebeat

What version are you on of the stack?

[stephenb (Stephen Brown)]

If you are using elastic Agent it would look like this..