How to read local0.info and local4.info file content in UNIX server using filebeat configuration

Hello Everyone,

I have some applications writing the logs to local0.info & local4.info file in UNIX servers.

I have to read the log content from above files using filebeat.yml and send the same to Logstash.

Could you please help me how to read/configure the input section as i am not able to find the exact path for local files.

Thanks.

Hello,

In order to find easily files on linux you can use the command "find"

example here starting from root directory :

sudo find / -name "local0.info" 

once you have the path of the file you can forward them to logstash using filebeat on your UNIX servers simply deploy the filebeat package and configure something like

filebeat.inputs:

- type: log
  enabled: true
  paths:
    - "/path/local0.info" 

to configure filebeat please read the documentation :

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.