When I installed filebeat in a linux server I enabled nginx module. In Discover, I can see all the nginx fields but they are ALL empty. My configuration is as follows:
input {
beats:...
}
filter {
...
}
output {
elasticsearch ....
}
Any help will be greatly appreciated.
It seems like adding the filter in logstash solved the problem. Use Logstash pipelines for parsing | Logstash Reference [7.11] | Elastic
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.