@ElasticMaa @elastock @andrewkroh @steffens
Here is my filebeat.yml:
filebeat.inputs:
- type: log
paths:
- "/home/ubuntu/log/test_logs_json"
enabled: true
json.keys_under_root: true
json.add_error_key: true
json.message_key: log
#setup.template:
#enabled: true
#name: test_template
#pattern: 'test_template*'
output.console:
pretty: true
#enabled: true
#hosts: ['aws-vpc-elasticsearch-cluster']
#index: "test_index"
# Or
output.elasticsearch:
enabled: true
hosts: ["https://vpc-elasticseacrh-cluster.amazonaws.com/"]
index: "test_index"
And here is log file:
{"message": "adas asdsada asdsad"}
{"message": "new asdsada asdsad"}
{"message": "second asdsada asdsad"}
{"message": "third asdsada asdsad"}
{"message": "fourth asdsada asdsad"}
{"message": "fifth asdsada asdsad"}
{"message": "sixth asdsada asdsad"}
{"message": "seventh asdsada asdsad"}
{"message": "eighth asdsada asdsad"}
When I start or restart Filebeat service It does nothing and through one warning " filebeat is unable to load the ingest node", I think this warning is not the reason of filebeat not working.