Filebeat error when importing logs

Elastic Stack Beats
1

Hello,
I configured my elasticsearch with file beat. When my file is changed I get the following error from filebeat:

imagem
imagem1318×128 16.7 KB

can someone helpme understand this error?

2

Can you post the complete error message, and preferably not as a screenshot but as actual text? Also, which versions of Filebeat and Elasticsearch are you using?

3

Hello its running on powershell but what I can see is that the error is on the timestamp format:

imagem
imagem1354×157 19.7 KB

where can I change the format that filebeat searches?
thanks

4

We're going to need some more information. Could you post your filebeat.yml configuration file?

Shaunak

5

Hello,
My filebeat.yml is:

Logs do uipath

filebeat.inputs:

  • type: log
    paths:
    • 'C:\Users\dto.rpa\AppData\Local\UiPath\Logs\Execution.log'

output.elasticsearch:
hosts: ["localhost:9200"]
username: "elastic"
password: ""
index: "uipathlogs"
pipeline: "uipathlogs-pipeline"

setup:
template.enabled: false
ilm.enabled: false

6

I think this error might be coming from the uipathlogs-pipeline Elasticsearch ingest pipeline. Could you post that pipeline here please, delimited by ``` so it's properly formatted and easy to read?

Thanks,

Shaunak

7

Hello, Thanks again for your help. The pipeline is:
[
{
"date": {
"field": "timeStamp",
"formats": [
"ISO8601"
],
"output_format": "yyyy-MM-dd'T'HH:mm:ss.SSSSSSSSSXXX"
}
}
]

8

From looking at the event in your error screenshot, I don't see a timeStamp field in there. That would explain this error.

9

The log has a timeStamp, hpow can I sove?