Filebeat: Reading the log files remotely

Whether filebeat can be used to read the log files (Webserver, Application,.etc) remotely, instead of installing it on the server where the logs reside?

On windows you can set prospector to a share

paths:
  - \\someshare\some_folder\test.log

Or better you mount the share to a drive for example z: and then just

- z:\some_folder\test.log

This should also work on linux, @ruflin @andrewkroh??

We don't recommend reading logs from a network share. https://www.elastic.co/guide/en/beats/filebeat/current/faq.html#filebeat-network-volumes

Hello, I have tried the same for linux machine, it didnt work. Can you please help me out on this.

Here are my detailed configuration:

Please let me know what I am missing here.

I have tried the same for linux machine, it didnt work.

Correct, because UNC paths only work on Windows. Install Filebeat on all machines where you want to collect logs.

Correct, because UNC paths only work on Windows.

Of course. I meant with linux something like nfs. I thought this was clear.

Of course. I meant with linux something like nfs. I thought this was clear.

It was. I was just responding to @netaibiswas's question about use of UNC paths on Linux.

@magnusbaeck :thumbsup:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.