I have a problem with filebeat configuration. When paths configuration looks like this all works fine (index created document indexed):
However I need to parse iis log files. I enabled iis module ("filebeat modules list" says "Enabled iis"). When I have iis module enabled filebeat ignores paths in filebeat.yml and uses these in "modules.d\iis.yml" (please correct me if I'm wrong).
Content of iis.yml is:
- module: iis
The result is no index and no documents. I use the same single file in both cases. After that registry files contains entry for iis-log.log What am I doing wrong?