How to make Filebeat 6.4.1 read custom application logs?

Elastic Stack Beats
1

Hello, I am new into this ELK stuff. I have question: how to make filebeat read custom log (for example vmware log) and send it to logstash?

I already read the guide and I am quite clueless. Do I need make new custom modules for the custom application logs? or i just need set up configuration on yml so filebeat can read the file?

I already set the path into the logs path in my yml, but it's not working.

Thank you for your attention

2

Could you post the relevant snippet from your filebeat.yml file, please? Also check that the enabled field is set to true in that section.

1 Like
3

sorry for the late reply. you are right. the enabled was set to false. after turn it into true, filebeat start read custom applications logs.
thank you for your help.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.