How to send only error logs path from filebeat to logstash

Elastic Stack Logstash
1

Hi ,

I am able to send logs from filebeat to logstash but i enabled logging level and given path to save under /var/log/filebeat to save the error files . filebeat is connected to logstash and now i am want logstash to take only those error logs under the path where filebeat created for logging level /var/log/filebeat. How to update logstash.conf file to fetch logs from /var/log/filebeat and help me with grok filter it will show only message of error .

I am struck on this

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.