Filebeat.yml problem


(Salma Ait Lhaj) #1

Hi,

I did this configuration on filebeat.yml but I had this error when I started it :

- type: log
  enabled: true
  paths:
    - /var/log/network/FWEquin_WAN_R03-01M.log
  fields:
    log_type: fortigate
- type: log
  enabled: true
    - /var/log/network/frghcfwdmz01m.log
  fields:
    log_type: paloalto
- type: log
  enabled: true
    - /var/log/network/frghcfwint01m-fwcommon-2.log
  fields:
    log_type: cisco_asa

[root@frghcslnetv03 filebeat]# service filebeat start
Starting filebeat: Exiting: error loading config file: yaml: line 26: did not find expected key

And the line 26 is :

log_type: fortigate

(Jaime Soriano) #2

Hi @asalma,

Your configuration looks fine at first, could you share the whole filebeat error logs?


(Salma Ait Lhaj) #3

Can you give the path for the error logs ?

Because in : /var/log There is no filebeat file or directory. Filebeat hadn't start yet


(Salma Ait Lhaj) #4

I resolve the problem by installing the new version of filebeat :confused:


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.