Hello, we use filebeat to ship the logs from server to graylog. I saw that filebeat has an apache module, I try that but it looks like that it doesn't work. It looks like that it doesn't parse and add extra fields. I change the log-file format to the recommendation from documentation and also change the path. On start i catch the logfiles but I see in graylog just the normal logs no fancy extra fields like apache2.access.method .
Is it a filebeat or graylog problem?
Neither. Most modules including the Apache module does the parsing and normalization in the elasticsearch ingest pipelines. Filebeat is just reading the logs and pushing them to elasticsearch.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.