Hi ,
I am new to ELK stack started exploring the tool.
First I had setup ELK stack without filebeat everything is working fine. Wanted to explore the
Filebeat after installing and configuring I do not see index created.
Environment
- ELK Version 7.12 is installed on Windows server
- Beats - 7.12.1 is installed on Linux Nginx web server
Configuration file filebeat.yml
filebeat.inputs:
# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.
- type: log
# Change to true to enable this input configuration.
enabled: false
# Paths that should be crawled and fetched. Glob based paths.
paths:
- /app/logs/access.log
# ------------------------------ Logstash Output -------------------------------
output.logstash:
# The Logstash hosts
hosts: ["10.XXX.XXX.XX:5044"]
Logstash configuration - logstash.conf
input {
beats {
port => 5044
}
}
output{
elasticsearch {
hosts => "localhost:9200"
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
stdout{
codec => rubydebug
}
}
After configuration changes I have restarted all the services. I do not see any errors in the log file(s) or errors on console. The Index is not created .
It would be great if any one give some pointers.
Thank you