FileBeat not Creating New Index in Elasticsearch


(Harshit Yadav) #1

When I'm Running FileBeat to Send the Log File from path
- C:\ProgramData\Elastic\Elasticsearch\logs\elasticsearch.log

using the following filebeat.yml file

filebeat.prospectors:

  • type: log
    enabled: false
    paths:
    filebeat.prospectors:
  • type: log
    enabled: false
    paths:
    • C:\ProgramData\Elastic\Elasticsearch\logs\elasticsearch.log
      filebeat.config.modules:
      path: ${path.config}/modules.d/*.yml
      reload.enabled: false
      setup.template.settings:
      index.number_of_shards: 3
      setup.kibana:
      output.elasticsearch:

    Array of hosts to connect to.

    hosts: ["localhost:9200"]

No Index is Created in ElasticSearch and on Using the Packet Filtering to find where all the data was going it was sending /get request on http://localhost:9200/.kibana/_mappings is that normal or does that has to do anything with setup.kibana in .yml file


(Adrian Serrano) #2

Can you paste your configuration using the </> button so it's legible?


(Harshit Yadav) #4
filebeat.prospectors:
- type: log
  enabled: false
  paths:
    - C:\ProgramData\Elastic\Elasticsearch\logs\elasticsearch.log
filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false
setup.template.settings:
  index.number_of_shards: 3
setup.kibana:
output.elasticsearch:
  hosts: ["localhost:9200"]

(Harsh Bajaj) #5

Hi,

Please set this parameter true in your config file as it will enable the prospector and try it with restart your services.

And please be ensure that your elasticsearch running on localhost or provide your elasticsearch IP in below section.

If you still are getting error then please share filebeat logs to identify the issue.

log file path: /var/log/filebeat/filebeat

Regards,


(Harshit Yadav) #6

Tried Using Enabled True and and checked for Hosts settings , have installed the filebeat as service in the windows services so have restarted it multiple times but the filebeat is not creating any logs

//I'm a beginner need a basic 101 example of setting up filebeat to send logs to elasticsearch any step by step tutorial on that ?


(Harsh Bajaj) #7

Could you please share the filebeat logs while starting service. it will be easy to understand your issue and help me to resolve.

Regards,


(Harshit Yadav) #8

Here is my Filebeat Log File


(Harsh Bajaj) #9

is your elasticsearch install on same node or different node??


(Harshit Yadav) #10

Same Node (Everything is installed Locally on same System)


(Harshit Yadav) #12

After Changing it to
hosts: [ "localhost:9200" ]

From Original- without space after bracket it started working ,and also changed the location of Log Directory

  hosts: ["localhost:9200"]

(system) #13

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.