Filebeat not sending logs

FIRST_Souharit · April 30, 2018, 8:46pm

Hello, I just started ELK and I sucked in English.
I have installed ELK + filebeat + winlogbeat on Ubuntu Vm as suggested, but filebeat does not send log firewall to kibana. Can not create index pattern logstash and filebeat but can create index pattern winlogbeat

The winlogbeat is sent from the main OS.

How do I solve this problem?
please help me

filebeat.prospectors:

- type: log

  enabled: false

  paths:
- C:\system32\LogFiles\Firewall\pfirewall.log
#- c:\programdata\elasticsearch\logs\

harshbajaj16 · May 1, 2018, 8:41am

Hi FIRST_Souharit,

Please set true above parameter and if you still getting error then please paste your logs here.

FIlebeat Logs /var/log/filebeat

Thanks,

FIRST_Souharit · May 1, 2018, 1:04pm

Thanks for the help.
But it still does not work.

filebeat.prospectors:

- type: log

  enabled: true

  paths: 
      - /var/log/filebeat
    #- c:\programdata\elasticsearch\logs\*

FIRST_Souharit · May 1, 2018, 1:09pm

harshbajaj16 · May 2, 2018, 3:28am

Hi,

Could you please share the logs for further investigation.

Log Paths:

Thanks,

system · May 30, 2018, 3:28am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.