Hi!
I have a Filebeat server configured to capture IIS logs.
And I would like to capture custom logs, but after parameterizing the filebeat.yaml files and placing the logs in the indicated folder, I cannot view the logs through kibana.
I checked the index setting in the Index Patterns section and the fields are not displayed.
I'm using version 7.5.1
Filebeat.yml
filebeat.inputs:
- type: log
enabled: true
paths:
- ./log/*.log
json.keys_under_root: true
json.add_error_key: true
logstash.conf
input {
beats {
port => 5044
}
}
output {
elasticsearch {
hosts => ["Server1:9200", "Server2:9200", "Server3:9200"]
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
}