I am configuring filebeat in nginx to send access & error logs to logstash for which I am defining two separate prospectors like below
filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use different prospectors for various configurations. # Below are the prospector specific configurations. - input_type: log # Paths that should be crawled and fetched. Glob based paths. paths: - /var/log/nginx/access.log document_type: nginx-access - input_type: log paths: - /var/log/nginx/error.log document_type: nginx-error
But it does not seem to be working as only access logs are harvested. This issue is already discussed by in a separate topic Filebeat config for nginx logs in which I have shared the complete filebeat.yml
Is there anything wrong with the filebeat config ?