filebeat and Elasticsearch running but now showing iis logs in in browser
url http://172.xx.x.xxx:9200/filebeat-*/_count?pretty
below is my config files
{
"count" : 0,
"_shards" : {
"total" : 0,
"successful" : 0,
"skipped" : 0,
"failed" : 0
}
}
iis yml file-----------------
-
- module: iis
-
Access logs
-
access:
-
enabled: true
-
# Set custom paths for the log files. If left empty,
-
# Filebeat will choose the paths depending on your OS.
-
var.paths: ["C:/inetpub/logs/LogFiles/*/*.log"]
-
Error logs
-
error:
-
enabled: true
-
# Set custom paths for the log files. If left empty,
-
# Filebeat will choose the paths depending on your OS.
-
var.paths: ["C:/Windows/System32/LogFiles/HTTPERR/*.log"]
-
#["C:\inetpub\logs"]
filebeat yml file ----------------
-
filebeat.inputs:
-
- type: log
-
enabled: true
-
- /var/log/*.log
-
#- c:\programdata\elasticsearch\logs\*