Filebeat.yml is deleting frequently

Filebeat.yml is deleting frequently on client(machine) file system.

Can anyone please suggest and your help is appreciated.

That's not something that Filebeat can do itself, something external must be removing it.

What if you setup Auditbeat to monitor that file?

Thanks for prompt response.

I have installed elastic search, kibana and logsyash on one server and filebeat on another server.

In filebeat.yml provide logstash output for log aggrgation.

After some hours (8hr or 9hr) filebeat.yml and fields file were deleted.

External script was removed filebeat.

Issue was now resolved we can close the thread

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.