I am using Filebeat 5.5 with ELK stack 5.5.
I configured filebeat.yml file to sent all logs to logstash. it is working fine when I am giving single log file but when I am trying to configure it for multiple log files it is not working.
I am not able to see any logs from multiple log file.
below I pasted my filebeat.yml file for your reference:
indent preformatted text by 4 spaces filebeat.prospectors: - input_type: log paths: - "/var/log/tomcat/tomcat.log" - "/var/log/cron" - "/var/log/messages" document_type: mytest_log fields: app_id: mylogs #---------------- Logstash output ---- output.logstash: hosts: ["LOGSTASH_IP:5044"] indent preformatted text by 4 spaces