jojodd
March 22, 2022, 1:07pm
6
Sorry I forgot to say but yesterday I found the solution to my problem and it works.
the solution can be found here :
I have to enable multiple filesets in the Cisco Module of Filebeat.
Is that possible?
Can I set a document_type for each fileset such as ASA, IOS, NEXUS, etc while configuring the modules?
It is required for me to filter it when I push it from Logstash to Elasticsearch as I will create separate indices for each device type.
Hi All,
I was able to send logs to Elasticsearch using Filebeat using the below configuration successfully.
# ============================== Filebeat inputs ===============================
filebeat.inputs:
- type: log
enabled: false
paths:
- /var/log/*.log
# ============================== Filebeat modules ==============================
filebeat.config.modules:
# Glob pattern for configuration loading
path: ${path.config}/modules.d/*.yml
# Set to true to enable config reloadin…
1 Like