Can include sub-configuration

Elastic Stack Beats
1

Hi,

There is filebeat & metricbeat in my machine. Some configuration is same in these yml file, like output elasticsearch or some customize fields.

Can I write the same things in a config-file, and then include it in others?

2

There is no 'include' support in beats config files. But you can specify multiple configuration files by using -c multiple times. Like filebeat -c /etc/filebeat/filebeat.yml -c /etc/beats/output.yml ....

Per beats settings are 'namespaced' If fields/tags/processors and outputs are exactly the same, you can even put all settings into one configuration file. Filebeat/Metricbeat 6.0 even supports loading modules from other directories.

e.g.

filebeat:
  ...

metricbeat:
  ...

output.elasticsearch:
  ...

Filebeat will ignore the metricbeat namespace when loading.

3

Thanks a lot.

I run the beats as a service in linux. How can I set the configure file for it?

And can change the default configure file settings in the 6.0 version?

4

The problem is resolved.

I modify the service file, change the args.

Thank you.

5

This topic was automatically closed after 21 days. New replies are no longer allowed.