I am using Filebeat > Logstash > Elasticsearch > Kibana to parse and analyse logs basically Java Stack Trace and other Tomcat Logs.
Here is YML for Filebeat
output: logstash: host: "10.0.64.14" port: 5044 index: filebeat timeout: 5 reconnect_interval: 3 bulk_max_size: 2048 shipper: tags: ["ABBYY_Engine", "UAT_OCR"] queue_size: 1000 ### Enable logging of the filebeat logging: level: warning to_files: true files: path: c:\logs\ name: mybeat.log rotateeverybytes: 20485760 # = 20MB keepfiles: 7
Problem : the Filebeat is not able to send logs to logstash at times, some times it start running shipping but sometimes it doesn't.
Although If I use "test.log" as a prospector and save logs locally on disk via below config it works well.
Writing Files to local File to Check the output. I have tried "file" and "logstash" one by one.
output: file: path: c:\logs\ filename: filebeat rotate_every_kb: 100000 number_of_files: 7
Also, The things mostly run when I am using command Line. :
.\filebeat.exe -c filebeat.yml -e -v
@Filebeat Team, Kindly assist with the correct config for windows.
The log file "abbyy.log" is getting rotated on every 30 MB of size.
I am not very sure to use the below attributes and how they will function with Filebeat on windows
Logging : This is also not working on windows.