# Filebeat configuration

**URL:** <https://discuss.elastic.co/t/filebeat-configuration/286972>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 18, 2021, 10:24am UTC](https://discuss.elastic.co/t/filebeat-configuration/286972 "2021-10-18T10:24:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mangeshs](https://avatars.discourse-cdn.com/v4/letter/m/e36b37/32.png) [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Post date:** [October 18, 2021, 10:24am UTC](https://discuss.elastic.co/t/filebeat-configuration/286972/1 "2021-10-18T10:24:51Z")

</div>

I have to read logs from different server so I am using filebeat for that.  
in filebeat yml file I have mention

```auto
filebeat.inputs:

- type: log
  enabled: true
  paths:
    - /home/3rdisearch-dev/project/mangeshs/logs/indexer-1/logs/*.log

  multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
  multiline.negate: true
  multiline.match: after

output.logstash:
  hosts: ["XX.XX.X.XX:5044"]

```

and logstash conf file input as

```auto
input {
    beats {
	    type => "test"
        port => "5044"
    }
}

```

sample log file

```auto
2021-09-28 11:04:56,060 INFO com.tdg.box.data.indexer.service.SolrIndexerService [Thread-165] Indexed docs:37272
2021-09-28 11:04:58,456 ERROR com.tdg.box.data.indexer.processor.BoxItemProcessor [Thread-166] Exception occured while getting file info, for fileid:473828671090 userId:177129950
com.box.sdk.BoxAPIResponseException: The API returned an error code [429 | xdg56cguwjrz1loo.0b2529a264e816335ba260ec03e13a4fa] rate_limit_exceeded - Request rate limit exceeded, please try again later
	at com.box.sdk.BoxAPIResponse.<init>(BoxAPIResponse.java:92)
	at com.box.sdk.BoxJSONResponse.<init>(BoxJSONResponse.java:32)

```

my questions are

1. is filebeat is correct
2. what exactly port 5044 is defined. is it logstash running port or anything
3. changes in log file are not reflected in ELK

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 15, 2021, 10:25am UTC](https://discuss.elastic.co/t/filebeat-configuration/286972/2 "2021-11-15T10:25:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.