FTP logs - Filebeat

Elastic Stack Beats
1

Hello there,

Is there a way to set Filebeat to retrieve al the files from a folder located in a FTP server? if yes, can you please give me more information on how to configure filebeat for that?

if no, what is the alternate way to do that?

Thank you in advance!

2

Hello everyone,

I think I can do this by installing filebeat on remote server. But my logs are on z/OS LPARs. they do not have a filebeat version for z/OS.

one more question, the logs are in ebcdic-1047 encoding. do I have to convert it into plain? can anyone tell me how to convert them?

Thank you,

3

Hello! Filebeat log input support ebcdic-1047 [encoding](: Log input | Filebeat Reference [7.12] | Elastic) with config option encoding. For example:

filebeat.inputs:
- type: log
  paths:
    - /var/log/vsftpd/vsftpd.log
  encoding: "ebcdic-1047"
4

Hello Kaiyan,

thank you for the response.

But my logs are on z/OS server. I have ftp access to these logs. how am I supposed to read these from z/OS server?

I thought I can download filebeat on z/OS and send logs to my elasticsearch but I think filebeat does not support that architecture. is there any other way?

Thanks

5

Filebeat does not support z/OS, you will need to transfer the logs to a supported system and collect the logs from there.

Depending on how the logs are created you can build a script that will connect through ftp, get the logs and then filebeat will read it.

2 Likes
6

Hello Leondro,

Thank you for your response on this topic.

last question, can I do the same with Logstash? does Logstash support z/OS?

Can I do anything with Logstash in this case?

Thank you

7

None of the tools in the stack support z/OS, they support only the x86_64 and ARM architectures running Linux, Windows or macOS.

8

Okay. Thank you Leandro!

9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.