Is there a way to use beats to get kernel messages directly from the kernel? I am experiencing some filesystem errors, and I am not sure how to get that info back with a file or metric beat if nothing can write the error to disk.
I wonder if you could read /proc/kmsg from Filebeat. Disclaimer: I've never tried this.
Or another option might be to pipe dmesg through Filebeat using stdin (dmesg -w | filebeat -c filebeat.yml). You would have to configure a prospector to read from stdin.
This topic was automatically closed after 21 days. New replies are no longer allowed.