File beat cant present my application log

[Dimas_Djs]

Hallo everyone, i just enabled filebeat.prospector from filebeat.yml to add my application path log, so filebeat can crawl from my application log, and be prensented in kibana. But when i have finished add my application log, and restart the filebeat, filebeat doesnt get my application log.

when i see my filebeat log, the prospectors is loaded but my application log isnt be loaded.

anyone can help me?

[harshbajaj16 (Harsh Bajaj)]

Hi @Dimas_Djs,

Could you please paste your config file here.

path : /etc/filebeat/filebeat.yml

Thanks,
Harsh Bajaj

[Dimas_Djs]

here is my filbet.yml

##################### Filebeat Configuration Example #########################

#=========================== Filebeat prospectors =============================

filebeat.prospectors:

• type: log
  enabled: true
  • /var/log/nginx/myapp.log

#============================= Filebeat modules ===============================

filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
#==================== Elasticsearch template setting ==========================

setup.template.settings:
index.number_of_shards: 3

filebeat.inputs:

• type: log
  paths:
  • "/var/log/nginx/myapp.log"

#============================== Kibana =====================================
#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
hosts: ["elk-sprintqoe:81"]

[Dimas_Djs]

hello @harshbajaj16 my application log has been harvested , but how could i see in my kibana ? because i cant see any log from my app.log in my kibana

[harshbajaj16 (Harsh Bajaj)]

Hi Dimas_Djs,

I've seen in your config file that you have configured elasticsearch o/p section and above mentione KIBANA. let me clear filebeat can't send the logs directly to kibana. you have to configure elasticsearch to store the logs and kibana will visualize that logs.

or

If you configure elasticsearch o/p then the port setting is wrong Elasticsearch reserves port 9200-9400.

output.elasticsearch:

hosts: ["elk-sprintqoe:81"]

Please check the same and configure accordingly and let me know if you are getting any issue.

Thanks,
Harsh Bajaj