Filebeat regex in windows path

Elastic Stack Logstash
1

Hi,

I'm trying to collect logs from a windows path with filebeat with filestream as input like so:

---
# vim:ft=yaml

- type: filestream
  paths:
    - 'C:\Users\*\some\other\folders\*.json'
  fields_under_root: true
  ignore_older: 30m
  close_older: 1h
  scan_frequency: 10s
  parsers:
    - ndjson:
        keys_under_root: true
        expand_keys: true

For some reason, this isn't working, though. I think that is because the path is in quotation marks, so the '' isn't seen as regex, but just as a ''.
Is there any workaround or might the reason be something else?
I guess escaping every backslash could work, but I didn't try this, yet.

2

Try with /

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.