How to make Filebeat 6.4.1 read custom application logs?


#1

Hello, I am new into this ELK stuff. I have question: how to make filebeat read custom log (for example vmware log) and send it to logstash?

I already read the guide and I am quite clueless. Do I need make new custom modules for the custom application logs? or i just need set up configuration on yml so filebeat can read the file?

I already set the path into the logs path in my yml, but it's not working.

Thank you for your attention


(Magnus Kessler) #2

Could you post the relevant snippet from your filebeat.yml file, please? Also check that the enabled field is set to true in that section.


#3

sorry for the late reply. you are right. the enabled was set to false. after turn it into true, filebeat start read custom applications logs.
thank you for your help.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.