Hello @Eshwar_Kumar, I think there is a small problem with your configuration if you look at the documentation.
I would remove the following:
filebeat.config:
prospectors:
enabled: true
path: C:\ELK\filebeat-6.1.1-windows-x86_64\*.yml
reload.enabled: true
reload.period: 10s
and replace it with
filebeat.config.inputs:
enabled: true
path: C:\ELK\filebeat-6.1.1-windows-x86_64\*.yml
reload.enabled: true
reload.period: 10s
After you just create a new file in the reloading path, that file must have a yml
extension. In the file you just define the prospector.
- type: log
enabled: true
paths:
- C:\ELK\filebeat-6.1.1-windows-x86_64\*.log
fields:
level: error
See the load external configuration documentation for more details.