Filebeat not sending logs


(First Souharit) #1

Hello, I just started ELK and I sucked in English.
I have installed ELK + filebeat + winlogbeat on Ubuntu Vm as suggested, but filebeat does not send log firewall to kibana. Can not create index pattern logstash and filebeat but can create index pattern winlogbeat

The winlogbeat is sent from the main OS.

How do I solve this problem?
please help me

filebeat.prospectors:

- type: log

  enabled: false

  paths:
- C:\system32\LogFiles\Firewall\pfirewall.log
#- c:\programdata\elasticsearch\logs\


(Harsh Bajaj) #2

Hi FIRST_Souharit,

Please set true above parameter and if you still getting error then please paste your logs here.

FIlebeat Logs /var/log/filebeat

Thanks,


(First Souharit) #3

Thanks for the help.
But it still does not work.

filebeat.prospectors:

- type: log

  enabled: true

  paths: 
      - /var/log/filebeat
    #- c:\programdata\elasticsearch\logs\*

(First Souharit) #4


(Harsh Bajaj) #5

Hi,

Could you please share the logs for further investigation.

Log Paths:

Thanks,


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.