Index creation with and without useful file paths

Elastic Stack Beats
1

Hello,

I have made a file prospectors in Filebeat with the following parameters:

- input_type: log
    - /opt/test/test_file
    - /var/log/syslog
  document_type: test

Which is parsed correctly and index is created normally. BUT I dont want the syslog file, so the config I want is the next:

- input_type: log
    - /opt/test/test_file
  document_type: test

No I have absolutely no results when I create the index again...

Can someone explain me this behaviour? Thanks.

2

This topic was automatically closed after 21 days. New replies are no longer allowed.