I'm trying to ship tomcat access logs using filebeat. The problem is that filebeat doesn't read log messages. I've tested many things and finally found out the problem is caused by the files suffix!!!
- type: log
enabled: true
paths:
- C:\foo\bar\localhost_access_log.2018-04-30.txt
When I change the suffix to .log filebeat ships messages. I know this sounds silly but really what is happen!!!
Any thoughts?
The file suffix should not have any effect as filebeat does not do anyhting with it. Could you enable debug logging and share the output when you run it with .txt? I assume you renamed it in the config and the file itself.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.