It doesn't seem to be doing anything

[BanksySan (David Banks)]

I have FileBeat installed as a service and I've set the following config:

filebeat:
  prospectors:
    -
      paths:
        - C:\LogFiles\log.log

      input_type: filebeat

  registry_file: "C:/ProgramData/filebeat/registry"

output:

  logstash:
    hosts: ["XX.XX.XX.XX:5044"]

shipper:

logging:

  files:
    path: C:\fileBeatLogs
    rotateeverybytes: 10485760 # = 10MB
  level: error

I've also tried the paths with forward slashes

The registry file is being changed when I start the service, but not at any other times and there are no logs being written to C:\fileBeatLogs\.

If I run FileBeat from the exe I get no output at all, even with the debug on C:\filebeat-1.2.3-windows>filebeat -c filebeat.yml -configtest -d "*"

[andrewkroh]

You need to use the -e option otherwise the logging will be sent to the file you defined. See Debug | Filebeat Reference [8.11] | Elastic

@BanksySan

input_type: filebeat

That's not a valid option. See Configure inputs | Filebeat Reference [8.11] | Elastic