I first set up and installed Filebeat, using RPM, on a Red Hat Linux VM with a plain filestream input, with path set to /var/log/redist_6379.log
. I then ran sudo service filebeat start
and verified I can see log output in Kibana Discover.
I then set up and installed Filebeat with RPM on a RHEL7 VM running 2 Docker containers. I configured the input as follows:
filebeat.inputs:
- type: container
enabled: true
paths:
- '/var/lib/docker/containers/*/*.log'
I then ran sudo service filebeat start
to start it.
Problem: No docker log output in Kibana discover
I ran this to look at the log sudo journalctl -u filebeat.service --since "5 minutes ago" | less
but did not see anything to indicate what might be wrong.
Is filebeat.autodiscover required?