How to index the data of file beat automatically


(nabil mohamed) #1

Dears ,

-please check the below configuration for the filebeat as below -->

[root@nabilmohamed2c filebeat]# cat filebeat.yml
filebeat.prospectors:

  • type: log
    paths:
    • /var/log/logstash-tutorial.log
      output.logstash:
      hosts: ["localhost:5044"]

-so how can i make the elasticsearch is automatically updated with the new data for "logstash-tutorial.log" automatically instead i manually put the new data every day at /var/log/logstash-tutorial.log ?

thanks ,


(Kaiyan Sheng) #2

Hi @Nabil_Mohamed, is your logstash module in filebeat enabled? More information can be found in https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-logstash.html for how to use filebeat to collect logstash logs.


(nabil mohamed) #3

thanks ,