Create New Tag in Beats Central Management

Elastic Stack Beats
,
1

Hi Team ,

i have a spacific filebeat.yml file, I want the new tag in Beats central management shoud be the same as the file . can you suggest.

I am sharing the file details here.

filebeat.inputs:

-
 type: log
 paths:
   - /u01/abc/tomcat/console*.log
 fields:
   environment: DEV
   layer: abc
   document_type: abc_console_log
 multiline.pattern: '^.*\|.*\|.*\|.*\| \d{2}:\d{2}:\d{2} (?:AM|PM)'
 multiline.negate: true
 multiline.match: after

-
 type: log
 paths:
   - /u01/abc_logs/jgc.log
 fields:
   environment: DEV
   layer: abc
   servername: testserver
   document_type: abc_jgc_log

-
 type: log
 paths:
   - /u01/abcs_logs/tomcat/*access*.log
 fields:
   environment: DEV
   layer: abc
   servername: testserver
   document_type: abc_access_log
 multiline.pattern: '^.*\|.*\|.*\|.*\| \d{2}:\d{2}:\d{2} (?:AM|PM)'
 multiline.negate: true
 multiline.match: after

filebeat.config.modules:
enabled: true
path: ${path.config}/modules.d/logstash.yml

output.logstash:

The Logstash hosts

hosts: ["172.12.13.34:5044", "172.12.13.35:5044", "172.12.13.36:5044"]

List of root certificates for HTTPS server verifications

#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
ssl.certificate_authorities: ["/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"]

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.