Filebeat output.logstash indicex & kibana index pattern for dashboard visualize


#1

I'm using filebeat to collect some of the data:

# rpm -q filebeat
filebeat-6.1.0-1.x86_64
# 

per filebeat.yml there are two outputs:

# egrep 'output\..**\:$' /etc/filebeat/filebeat.yml.rpmnew 
#output.elasticsearch:
output.logstash:
# 

unfortunately, direct access to elasticsearch isn't available and as alternative logstash is my only choice.

My question, since logstash writes data into logstash-* indices and yet filebeat's Dashboards and/or Visualizes reads from metricbeat-*, how shall I deal with this?

Please advise.


(ruflin) #2

You can configure the index Logstash should write to. See https://www.elastic.co/guide/en/beats/libbeat/6.1/logstash-installation.html#logstash-setup


#3

Thanks a lot! That is exactly what I was looking for)


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.