Filebeat configuration log file path won't load

Elastic Stack Beats
1

Hello,

I have a custom configuration for filebeat for logging:

logging.level: warning
logging.to_files: true
logging.files:
  path: /var/log/filebeat/
  name: filebeatVdpQueries
  keepfiles: 7
  permissions: 0644

But when service starts, the file permission aren't in 0644 then 0640.

-rw-r-----. 1 root root  786 Sep 21 11:50 /var/log/filebeat/filebeatVdpQueries
-rw-r-----. 1 root root  786 Sep 21 11:50 /var/log/filebeat/filebeatVdpQueries.1

the configuration filebeat.service:

[Service]

Environment="BEAT_LOG_OPTS="
Environment="BEAT_CONFIG_OPTS=-c /etc/filebeat/filebeat-denodo-qal-vdpQueries.yml"
Environment="BEAT_PATH_OPTS=-path.home /usr/share/filebeat -path.config /etc/filebeat -path.data /var/lib/filebeat-denodo-qal-vdpQueries -path.logs /var/log/filebeat-denodo-qal-vdpQueries"
ExecStart=/usr/share/filebeat/bin/filebeat -environment systemd $BEAT_LOG_OPTS $BEAT_CONFIG_OPTS $BEAT_PATH_OPTS
Restart=always

I know the filebeat configuration is not override by the service configuration but it's not explain the permission changment.
On the server all the command are lunch with root user.

Anybody have an explanation ?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.