Apache logs


(mohamed.samir) #1

dears, is there any useful help link, to send apache logs to kibana server (automatically in real-time)
or how to configure the apache server?


(Christian Dahlqvist) #2

Easiest way is to install Filebeat on your web servers and enable the Apache Module and then let its send data directly to Elasticsearch so you can view it through Kibana.


(mohamed.samir) #3

thanks chris,
please, is there any direct configuration on the apache without the need to install any other tools.
and if i used filbeat, will it send the logs to kibana server and leave a copy on server, or will it be deleted from server


(Christian Dahlqvist) #4

There is no direct configuration option on Apache, so installing Filebeat is the way to go. It will tail logs, but not delete them from the host.


(mohamed.samir) #5

hello chris,
i have installed filebeat on the web server
and adjusted filebeat.yml to external kibana server as follow;

output.logstash:
hosts: ["192.168.10.10:5044"]

and adjusted apache2.yml as follow;

access:
enabled: true
var.paths: ["/var/log/apache2/access.log"]
error:
enabled: true
var.paths: ["/var/log/apache2/error.log"]

however, it is not working, i didn't receive any logs to my kibana 192.168.10.10
kindly advise;


(mohamed.samir) #6

hello chris,
it works fine, sorry there was a problem with my elastic configuration.
please, is there any way to do same task with IIS server?


#7

Hello,
You should give a look to Filebeat available modules described in the docs, which includes IIS.