Filebeat agent sending logs some days and it doesnt send logs somedays if i dont restart

Elastic Stack Beats
1

filebeat need to restart to send logs to logstash .

2

Hello, we would need more detaisl to start debugging this issue could you share your configuration?

3

Hello ,

Thanks for your response

Here is my beat configuration

#=========================== Filebeat inputs =============================
filebeat.prospectors:

  • type: log
    enabled : true
    #encoding: us-ascii
    paths:

    • /example/example-*.log
      input_type: log
      multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
      multiline.negate: true
      multiline.match: after
      document_type: log
      fields:
      environment: test
      component: something
      fields_under_root: true
      ignore_older: 168h

    #================================ Outputs =====================================

Configure what output to use when sending the data collected by the beat.

output.logstash:
enabled: true
hosts: ["IP:port","IP:port"]
loadbalance: true
index: "logstash*"
max_retries: 5

4

Hello Could someone reply

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.