Beats config locks the log file which I cant edit in MacOS,pls help resolve


(Vishnu Prasad) #1

OS used is as follows:
Version:Macbook OSX
Operating System: 10.10.5
filebeat-1.2.3-darwin is version am using with logstash-2.3.4 and elasticsearch-2.4.0 with kibana-4.6.0
I got the configuration for filebeat going for logstash and filebeat.yml as follows. The biggest issue is that the log file is locked by filebeat process and am not able to edit it. How do I control this ? Please help, i have tried this for over 3hrs now :frowning:

input{
beats{
port=>5044
}
}
output{
kafka{
topic_id=> "accesslogs"
}
elasticsearch{
hosts => ["localhost:9200"]
}
}

Filebeat config

filebeat:
prospectors:
paths:
"/var/apps/logs/*"
input_type: log

  close_older: 1m

  document_type: log

  scan_frequency: 10s

  backoff: 1s

  force_close_files: true
output:
logstash:
hosts: ["localhost:5044"]
worker: 1
index: filebeat

shipper:
tags: ["node", "node1"]
ignore_outgoing: true
refresh_topology_freq: 10
logging:
files:
path: /var/log/mybeat

name: mybeat

rotateeverybytes: 10485760 # = 10MB
keepfiles: 5

(Mark Walkom) #2

What log file?


(ruflin) #3

See my comment here what additional data is needed: https://github.com/elastic/beats/issues/2453 Please do not double post.


(system) #4

This topic was automatically closed after 21 days. New replies are no longer allowed.