Filebeat modules and inputs

Elastic Stack Beats
1

Hi,

I'm a bit confused how modules work or if what I am trying to do is even possible.
I got logs from a mssql instance that logs to an eventhub in azure. If I configure the filebeat agent to read the event hub it is send to elastic it just post the json as the message not parsed into fields.

I don't seem to find good documentation how to configure a different input than var.paths and change it to an eventhub input
log:
enabled: true
# Set custom paths for the log files. If left empty,
# Filebeat will choose the paths depending on your OS.
#var.paths:

Any one that has experience with input plugins in modules or a guide hoe it should work?

2

If u want to override the input of a module, just set input: xxxx in the config and whatever other configs u need for that input to function.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.