Filebeat.yml problem

Elastic Stack Beats
1

Hi,

I did this configuration on filebeat.yml but I had this error when I started it :

- type: log
  enabled: true
  paths:
    - /var/log/network/FWEquin_WAN_R03-01M.log
  fields:
    log_type: fortigate
- type: log
  enabled: true
    - /var/log/network/frghcfwdmz01m.log
  fields:
    log_type: paloalto
- type: log
  enabled: true
    - /var/log/network/frghcfwint01m-fwcommon-2.log
  fields:
    log_type: cisco_asa

[root@frghcslnetv03 filebeat]# service filebeat start
Starting filebeat: Exiting: error loading config file: yaml: line 26: did not find expected key

And the line 26 is :

log_type: fortigate
2

Hi @asalma,

Your configuration looks fine at first, could you share the whole filebeat error logs?

3

Can you give the path for the error logs ?

Because in : /var/log There is no filebeat file or directory. Filebeat hadn't start yet

4

I resolve the problem by installing the new version of filebeat :confused:

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.