I installed the filebeat in linux environment using the rpm installation sudo install rpm filename. On observing that the default directory layout data folder "/var/lib/filebeat" and logs folder "/var/log/filebeat" are not created. Is this any issue. Do we need to create these folder manually? Can any one guide me why this happened. I am not able to see any logs whether the file beat is running or not. Please help me in this issue.
There is no need to create it manually. These folders are created when Filebeat is started.
If you run filebeat.sh -e, it logs to stderr, so you can see what is happening. If -e is not specified logs will be written to /var/log/filebeat/filebeat by default.
It is not possible to use -e option in sudo service filbeat start command. If you want to use this option, you have to modify the initscript which is not advised.
Does /var/log/filebeat/filebeat is created after you start the service? What is the return value of sudo service filebeat start?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.