IIS Module for Filebeats Not parsing Correct

Elastic Stack Beats
1

I am trying to send my logs to filebeat with using filebeat with iis module and I have managed to send it following the documentation of iis module. Unfortunately, Its not parsing several things.

Kibana:

Untitled
Untitled.png1385×781 56.3 KB

Filebeat:

filebeat.inputs:

- type: log

  paths:
    - /var/log/*.log
    #- c:\programdata\elasticsearch\logs\*

filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml

  reload.enabled: false

setup.template.settings:
  index.number_of_shards: 3
  
output.elasticsearch:
  hosts: ["c*****.*********.com:9200"]

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

iss.yml :

- module: iis
  # Access logs
  access:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    #var.paths: 

  # Error logs
  error:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    #var.paths:
2

Could you share some example logs which it is not parsing?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.