Hello I am looking at a host running Ubuntu Xenial, Logging goes to the /var/log/filebeat/filebeat fine, until an index it is writing to goes read only. Then filebeat spams /var/log/syslog with messages like the following until the disk fills to 100%. This behavior is also present with the other b…

kvch (Noémi Ványi) April 30, 2019, 1:22pm 2

Does journald run on your system? How do you start the Beat service?

Doubts about how exclude events by the process name with filebeat

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Beats (filebeat/metricbeat etc.) log to syslog with "logging.to_syslog: false"