Filebeat-6.7.0 on windows IIS module

[Michalis_Kyprianou]

Hi all

we have installed filebeat 6.7.0 on windows server running iis which we need to monitoring logs.

filebeat settings

filebeat.inputs:

• type: log

  enabled: false

  paths:
  #- /var/log/*.log
  #- c:\programdata\elasticsearch\logs*

filebeat.config.modules:

path: ${path.config}/modules.d/*.yml

reload.enabled: false

setup.template.settings:
index.number_of_shards: 3

setup.kibana:

output.logstash:

hosts: ["x.x.x.x:5045"]

processors:

• add_host_metadata: ~
• add_cloud_metadata: ~

iis module

Enabled:
iis

Disabled:
apache2
auditd
haproxy
icinga
iptables
kafka
kibana
logstash
mongodb
mysql
nginx
osquery
postgresql
redis
suricata
system
traefik

iis.yml

• module: iis
  access:
  enabled: true

  var.paths: ["C:/inetpub/logs/LogFiles//.log"]

  error:
  enabled: true

  var.paths: ["C:/Windows/System32/LogFiles/HTTPERR/*.log"]

the service is running however no data send to logstash.

thanks
Michalis