Adding type in filebeat.yml

Elastic Stack Beats
1

I am stashing jenkins logs from filbeat to ELK stack. I have taken the reference of this logstash.conf file.

filter_plugin
filter_plugin723×560 53.5 KB

I need to add the type => jenkins-server (highlighted in red) to my filebeat.yml for better filtering. I have tried to add it but its not working.

Can anyone help me in adding this to my filebeat.yml.

#=========================== Filebeat inputs =============================

filebeat.inputs:

  • type: log
    enabled: true
    paths:
    • /opt/app/elk/logs/jenkins.log
      multiline.pattern: '^%{MONTH} %{MONTHDAY}, %{YEAR} %{TIME} (AM|PM)'
      multiline.negate: true
      multiline.match: before

In my guess, I have to override the type => log in filebeat.yml.
Please help here.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.