Filebeat - prospectors/inputs and active modules with configuration

Elastic Stack Beats
1

Dear Elastic Team,

I am having a small question. Currently I am using a wildcard expression in my Filebeat input configuration (/var/log/log; /var/log//*log)., but I started to use the system module with its configuration under /etc/filebeat/modules/.

Does the activation of the system module, automatically excludes the files from my main input configuration or do I have to exclude them manually?

Greetings,

YK

2

Hi @yannicknk,

Enabling the system module should not automatically exclude any inputs you defined in your configuration.

A few questions:

  • Before you enabled the system module were the files you defined in your inputs getting harvested?
  • What version of Filebeat are you using?
  • Which OS are you running on?
  • Can you paste your Filebeat configuration here, including configuration for modules you have enabled?
  • Can you paste your Filebeat logs here?
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.