"Filebeat.prospectors has been removed"

This is my filebeat.yml file content

filebeat:
prospectors:
-
paths:
- C:/elk/*.log
input_type: log
multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after

output:
logstash:
hosts: ["localhost:5044"]

In my filebeat installation folder, I have fields.yml, filebeat.reference.yml, filebeat.yml,LICENSE.txt, NOTICE.txt and README.txt files. am I missing a file? How should I try to fix it?

And where is the below file added and modified, as mentioned by Configure Filebeat official page-
filebeat.inputs:

  • type: log
    paths:
    • /var/log/system.log
    • /var/log/wifi.log
  • type: log
    paths:
    • "/var/log/apache2/*"
      fields:
      apache: true
      fields_under_root: true

What is the version of Filebeat your are using?

Prospectors has been renamed to inputs in 6.3. So if you simply change prospectors to inputs, it should work.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.