Filebeat service doesn't send apache logs

Elastic Stack Beats
1

This is my current configuration file.

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/log/apache2/*.log

output.logstash:
  hosts: ["localhost:5044"]
  enabled: true

setup.dashboards.enabled: true
setup.kibana:
  host: "localhost:5601"

my logstash.conf file.

input {
        beats {
                port => "5044"
        }
}

filter {
        grok {
                match => { "message" => "%{COMBINEDAPACHELOG}" }
        }
        date {
                match => [ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z" ]
        }
}

output {
        elasticsearch {
                hosts => ["localhost:9200"]
                index => "apache"
        }

        stdout {}

}

although filebeat listening 5044 port, there is nothing on elasticsearch. how can i solve?

2

What is showing up in the logstash console?

Also Filebeat will only send the file once if you want to send it again you need to clean out the data registry..

Also Did you know there is a built-in in module for Apache logs in Filebeat... You don't need Logstash?

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.