How to log auditbeat/metricbeat output not to syslog?

Elastic Stack Beats
1

I have example config. And i still don't see any files in /tmp/ folder. All auditbeat log goes to syslog? Is it possible to log it into file instead of syslog?

My current config:

logging.level: warning
logging.to_syslog: false
logging.to_files: true
logging.files.path: /tmp/
logging.files.name: auditbeat
logging.files.keepfiles: 7
logging.files.permissions: 0644
2

Finally found that it's a "feature" https://github.com/elastic/beats/issues/12024

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.