I updated filebeat to version 5.3.0 on a linux server (Ubuntu 16.04 LTS).
I wanted to enable the module nginx; but I got an this error (when executing filebeat as a service).
2017-03-30T11:41:38+02:00 INFO Metrics logging every 30s
2017-03-30T11:41:38+02:00 INFO Flush Interval set to: 1s
2017-03-30T11:41:38+02:00 INFO Max Bulk Size set to: 2048
2017-03-30T11:41:38+02:00 CRIT Exiting: Error reading fileset nginx/access: Error reading manifest file: config file ("/usr/share/filebeat/module/nginx/access/manifest.yml") can only be writable by the owner but the permissions are "-rw-rw-r--" (to fix the permissions use: 'chmod go-w /usr/share/filebeat/module/nginx/access/manifest.yml')
Changing permissions doesn't solve the problem.
I'm "noob" with ELK ; I installed version 5.2.0 first ( I was "waiting" for nginx module before going deeper in configuration).
So I uninstalled filebeat package and reinstalled it. But it doesn't work better.
If I execute filebeat manually, the problem doesn't happen (I'm not sure since it's really verbose)
/usr/share/filebeat/bin/filebeat -c /etc/filebeat/filebeat.yml -e -d "*"
Below the filebeat.yml (condensed, comments dropped ; it seems that there is mistake in tutorial, where it's "name" key instead of "module" )
filebeat.modules: - module: nginx access: enabled: true error: enabled: true filebeat.prospectors: - input_type: log paths: - /var/log/*.log output.elasticsearch: enabled: false output.logstash: enabled: true
If you need more informations / tests, ask me.