Filebeat 7.3 logging output

Elastic Stack Beats
1

I just upgraded from Filebeat 7.0 to Filebeat 7.3 and i notice that it's defaulting back to /var/log/messages output error logs, even though it was configured to have separate logs.

The filebeat process is running the -e flag:

Here's the full PID:

/usr/share/filebeat/bin/filebeat -e -c /etc/filebeat/filebeat.yml -path.home /usr/share/filebeat -path.config /etc/filebeat -path.data /var/lib/filebeat -path.logs /var/log/filebeat

Also having this config in filebeat.yml:

logging.to_syslog: false
logging.to_files: true
logging.files:
  path: /var/log/filebeat
  name: filebeat
  keepfiles: 7
  permissions: 0644

Anyone else having these issues with Filebeat 7.3 or am i missing something?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.