[FIlebeat] How to get logs default paths for modules?

Travis · October 27, 2020, 1:53pm

Found !

elastic/beats/blob/master/filebeat/module/system/auth/manifest.yml#L5


module_version: 1.0

var:
  - name: paths
    default:
      - /var/log/auth.log*
      - /var/log/secure*
    os.darwin:
      # this works in OS X < 10.8. Newer darwin versions don't write
      # ssh logs to files
      - /var/log/secure.log*
    os.windows: []

ingest_pipeline: ingest/pipeline.yml
input: config/auth.yml

github.com

elastic/beats/blob/master/filebeat/module/system/syslog/manifest.yml#L5


module_version: "1.0"

var:
  - name: paths
    default:
      - /var/log/messages*
      - /var/log/syslog*
    os.darwin:
      - /var/log/system.log*
    os.windows: []

ingest_pipeline: ingest/pipeline.yml
input: config/syslog.yml

@Mario_Castro

Topic		Replies	Views
Filebeat will choose the paths depending on your OS. - Listing? Beats filebeat	2	534	March 27, 2019
How filebeat chooses module paths based on OS when running inside docker Beats	3	285	April 22, 2020
Why my filebeat settings can only read /var/log/messages. I need to read all files in /var/log and my customized log folder: /suselv/log Beats filebeat	1	318	October 16, 2023
Filebeat system module "no filesets enabled" with custom path Beats filebeat	5	365	February 19, 2025
Default log paths used for beats Beats filebeat , metricbeat , auditbeat	4	416	April 28, 2021

[FIlebeat] How to get logs default paths for modules?

Related topics