Help me in configure filebeat index

The error you see is due to the fact that a Filebeat instance is already running on your host. You cannot run multiple Filebeat instances with the same data folder. If you want to you should set -path.data to an alternative folder.

Have you tried to fix the indentation of your config? I have removed one space from var.paths.

# Module: tomcat
# Docs: https://www.elastic.co/guide/en/beats/filebeat/8.2/filebeat-module-tomcat.html

- module: tomcat
  log:
    enabled: true

    # Set which input to use between udp (default), tcp or file.
    # var.input: udp
    # var.syslog_host: localhost
    # var.syslog_port: 9501

    # Set paths for the log files when file input is used.
    var.paths:
       - /home/thapos/tomcat/tomcat8/logs/catalina.out

    # Toggle output of non-ECS fields (default true).
    # var.rsa_fields: true

    # Set custom timezone offset.
    # "local" (default) for system timezone.
    # "+02:00" for GMT+02:00
    # var.tz_offset: local

Hi @kvch

There is another issue with yaml file, the var.input should be configured too.

 var.input: file

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.