I have given comment to filebeat.yml especially "#setup.kiban"
If you aren't going to use the dashboards then just skip the setup command completely. When Filebeat first connects to Elasticsearch it will setup the index template for you.
You can run
filebeat setup -h to see that it has additional flags such as
--pipelines for limiting the scope of the setup.
I have followed your step to
filebeat setup -h and then i gave command
filebeat setup --template after that i did
service filebeat start and the feedback was
Config is OK. When i check
service filebeat status, filebeat is not running.
Should i downgrade to other Filebeat version ?
I decided to follow these steps https://www.elastic.co/guide/en/beats/filebeat/6.3/filebeat-configuration.html
I don't use modules anymore, just pointing paths to exact log path (example : apache2 -> /var/log/access.log)
please check filebeat log in /var/log/filebeat and provide us.
Yes for your question, yes if you are using default template then no need to setup kibana host details and later you can use from elasticsearch .
Filebeat is running and give me the report when i typed
filebeat -e -c filebeat.yml or
filebeat -e only should be enough. So, i don't follow this step
filebeat setup -e on this link https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-apache2.html. I think that step is loading the default settings (Kibana, Elasticsearch and Filebeat).
And, the next thread i would make, How could Graylog2 receive input from filebeat harvest ? i read forum and i notice GELF can be implemented.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.