Your filebeat is running inside a container, so it will only have access to files that exists or are accessible from inside that container.
If your logs are in your host server, where you are running docker, you need to run filebeat in your host server or bind mount the log folder into the filebeat container.
Filebeat also needs to have a persistent volume to store its registry.
Create a path like: C:/Users/Gustavo/Documents/workspace/Event-Management-Distributed-System/user-service/registry for this.
You will probably need to add 2 more volumes in your filebeat configuration in the docker-compose.
I do not use docker much, but will probably be something like this:
- C:/Users/Gustavo/Documents/workspace/Event-Management-Distributed-System/user-service/logs:/usr/share/filebeat/logs:ro
- C:/Users/Gustavo/Documents/workspace/Event-Management-Distributed-System/user-service/registry:/usr/share/filebeat/data:rw
Then you need to change your filebeat.yml to look for logs on /usr/share/filebeat/logs