Filebeat shipping only WARNINGS of haproxy

Elastic Stack Beats
1

Hello, I am trying to ship my haproxy logs with filebeat to elk cloud

This is my /etc/filebeat/modules.d/haproxy.yml

- module: haproxy
  log:
    enabled: true
    var.paths: ["/var/log/haproxy.log"]
    var.input: "file"

and this is the output of my /var/log/haproxy.log file -

Oct 19 13:51:17 testenv haproxy[1031865]: 91.143.218.142:56396 [19/Oct/2021:13:51:14.233] cloudwaferfrontend JumperStack1/lte1 0/0/74/1126/3696 200 6849 - - --VN 63/63/62/19/0 0/0 {www.mydomain.com:44} "CONNECT www.mydomain.com:443 HTTP/1.1"
Oct 19 13:51:17 testenv haproxy[1031865]: 91.143.218.142:56902 [19/Oct/2021:13:51:15.993] cloudwaferfrontend JumperStack1/lte3 0/0/72/148/1973 200 24846 - - --VN 66/66/65/7/0 0/0 {www.mydomain.com:44} "CONNECT www.mydomain.com:443 HTTP/1.1"
Oct 19 13:51:18 testenv haproxy[1031865]: 91.143.218.142:43296 [19/Oct/2021:13:51:08.634] cloudwaferfrontend JumperStack1/lte2 0/0/63/584/9489 200 3722 - - sDVN 68/68/67/2/0 0/0 {www.mydomain.com:44} "CONNECT www.mydomain.com:443 HTTP/1.1"
Oct 19 13:51:18 testenv haproxy[1031865]: 91.143.218.142:58438 [19/Oct/2021:13:51:16.226] cloudwaferfrontend JumperStack1/lte3 0/0/70/138/2002 200 30417 - - --VN 69/69/68/7/0 0/0 {www.mydomain.com:44} "CONNECT www.mydomain.com:443 HTTP/1.1"
Oct 19 13:51:18 testenv haproxy[1031865]: 91.143.218.142:38992 [19/Oct/2021:13:51:07.907] cloudwaferfrontend JumperStack1/lte1 0/0/68/909/10368 200 25011 - - --VN 68/68/67/18/0 0/0 {www.mydomain.com:44} "CONNECT www.mydomain.com:443 HTTP/1.1"
Oct 19 13:51:18 testenv haproxy[1031865]: 91.143.218.142:40140 [19/Oct/2021:13:51:17.407] cloudwaferfrontend JumperStack1/lte3 0/0/68/129/928 200 6850 - - --VN 68/68/67/6/0 0/0 {www.mydomain.com:44} "CONNECT www.mydomain.com:443 HTTP/1.1"

displaying logs as usual.

But in my kibana dashboard I can only see servers going up and down, the access logs are not being shipped.

this is my /var/log/filebeat/filebeat, no errors here either.

2021-10-19T13:39:16.399Z INFO instance/beat.go:665 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]

What could be missing? Thank you!!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.