"Filebeat.prospectors has been removed"

Elastic Stack Beats
1

This is my filebeat.yml file content

filebeat:
prospectors:
-
paths:
- C:/elk/*.log
input_type: log
multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after

output:
logstash:
hosts: ["localhost:5044"]

In my filebeat installation folder, I have fields.yml, filebeat.reference.yml, filebeat.yml,LICENSE.txt, NOTICE.txt and README.txt files. am I missing a file? How should I try to fix it?

And where is the below file added and modified, as mentioned by Configure Filebeat official page-
filebeat.inputs:

  • type: log
    paths:
    • /var/log/system.log
    • /var/log/wifi.log
  • type: log
    paths:
    • "/var/log/apache2/*"
      fields:
      apache: true
      fields_under_root: true
3

What is the version of Filebeat your are using?

Prospectors has been renamed to inputs in 6.3. So if you simply change prospectors to inputs, it should work.

2 Likes
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.