Filebeat reads logs from various locations?

Filebeat reads logs from various locations in same yml file and sends them to the ELK (Elasticsearch, Logstash, and Kibana) stack for processing and analysis?

For instance:
-log.file.path: /etc/home/usr/logs
-log.file.path: /etc/files/logs

This is possible, and it is the first example in the documentation.

You can add multiple paths to a filestream input or use different filestream inputs, as the documentation example shows.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.