Hi,
I configured filebeat.yml with logstash output but I got this error: Exiting: Index management requested but the Elasticsearch output is not configured/enabled
filebeat.yml
filebeat.config:
modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
processors:
- add_cloud_metadata: ~
output.logstash:
hosts: ["10.21.2.237:5044", "10.21.2.226:5044"]
loadbalance: true
modules.d/apache.yml
- module: apache
access:
enabled: true
var.paths: ["/usr/share/filebeat/logs/access.log*"]
error:
enabled: true
var.paths: ["/usr/share/filebeat/logs/error.log*"]
logstahs.pipeline:
input {
beats {
port => 5044
}
tcp {
port => 5000
}
}
## Add your filters / logstash plugins configuration here
output {
elasticsearch {
hosts => "elasticsearch:9200"
user => "elastic"
password => "changeme"
ecs_compatibility => disabled
}
}
i want filebeat.yml send to logstash on port 5044.
best regard
Olivier