Hi , I'm facing a problem with my elk server. I have installed filebeat and metricbeat in my server . The root mount is getting filled with the logs and having space issue. Due to that the new logs are not getting loaded in elasticsearch. Can we overcome this problem to send logs to S3 from filebeat /metricbeat ?
Is there any scenario like filebeat(logs) -->S3--> kibana?
Thank you Mario_Castro for the good suggestion . But I have a doubt that if we want to old indices to be presented in the elasticsearch so that to see the historical log monitoring, what is the best way for that?
Thanks in advance. And one more I just enabled and started the filebeat . My root mount size is 20 GB in that available is 13GB . After I started filebeat and logstash with in one hour the logstash throwing an error and the root mount almost full.
How can I overcome this issue.
please help me on this..
I have removed two directories from the location
/var/lib/elasticsearch/nodes/0/indices
These are the two indices that I removed from the above location.
after that I restarted the elasticsearch , It is failed to start. Please help on this.
3cQZvpsjRBmfAz_SLcWdpQ
uIxRIDZ0SLmHeJD-eREypA
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.