Configuring Filebeat to use proxy for any input request that goes out

Elastic Stack Beats
1

I am running Elasticsearch, Kibana and Filebeats on my office windows laptop. I am trying to use filebeat -microsoft module. All outgoing http/s requests go via a proxy. How do I Configure Filebeat to use proxy for any input request that goes out (not just microsoft module). Setting HTTP_PROXY HTTPS_PROXY as environment variable does not seem to do the trick.

I see proxy setting for output to Elasticsearch & Kibana. But Is there configuration setting for proxy url for input requests ?

2

Yes, any module that uses the httpjson input has the var.proxy_url setting that u can set.

3

I had the following entry in the microsoft module. It is not being used.

m365_defender:
enabled: true
# How often the API should be polled
var.interval: 1m

var.proxy_url: proxy_domain_name:8080

If I set the proxy_domain_name the to HTTPS_PROXY then the curl command is working properly. Even after setting up filebeat module again, the proxy url is not recognised.

4

What version of filebeat?

5

filebeat-7.13.4

6

What do the logs show? Any errors? Us the connection being attempted without the proxy even when it's set or just not working?

7

Thank you very much. var.proxy_url resolved the issue. I did not have the protocol (http://) as part of it earlier. Once I added it resolved the issue.

8

Awesome