Hello I am looking at a host running Ubuntu Xenial, Logging goes to the /var/log/filebeat/filebeat fine, until an index it is writing to goes read only. Then filebeat spams /var/log/syslog with messages like the following until the disk fills to 100%. This behavior is also present with the other b…

Beats (filebeat/metricbeat etc.) log to syslog with "logging.to_syslog: false"

kvch (Noémi Ványi) April 30, 2019, 1:22pm 2

Does journald run on your system? How do you start the Beat service?

Doubts about how exclude events by the process name with filebeat

Topic		Replies	Views
Beats writing logs to messages Beats	7	1424	December 11, 2019
How to avoid outputting filebeat logs to /var/log/messages Beats filebeat	3	2551	June 14, 2021
Filebeat events in syslog despite setting to_syslog: false Beats filebeat	5	1083	October 10, 2016
How to log auditbeat/metricbeat output not to syslog? Beats	2	500	July 15, 2019
Beats logs going to syslog and not defined file path Beats	3	274	May 14, 2019