The error you see is due to the fact that a Filebeat instance is already running on your host. You cannot run multiple Filebeat instances with the same data
folder. If you want to you should set -path.data
to an alternative folder.
Have you tried to fix the indentation of your config? I have removed one space from var.paths
.
# Module: tomcat
# Docs: https://www.elastic.co/guide/en/beats/filebeat/8.2/filebeat-module-tomcat.html
- module: tomcat
log:
enabled: true
# Set which input to use between udp (default), tcp or file.
# var.input: udp
# var.syslog_host: localhost
# var.syslog_port: 9501
# Set paths for the log files when file input is used.
var.paths:
- /home/thapos/tomcat/tomcat8/logs/catalina.out
# Toggle output of non-ECS fields (default true).
# var.rsa_fields: true
# Set custom timezone offset.
# "local" (default) for system timezone.
# "+02:00" for GMT+02:00
# var.tz_offset: local