I have FileBeat installed as a service and I've set the following config:
filebeat: prospectors: - paths: - C:\LogFiles\log.log input_type: filebeat registry_file: "C:/ProgramData/filebeat/registry" output: logstash: hosts: ["XX.XX.XX.XX:5044"] shipper: logging: files: path: C:\fileBeatLogs rotateeverybytes: 10485760 # = 10MB level: error
I've also tried the paths with forward slashes
The registry file is being changed when I start the service, but not at any other times and there are no logs being written to
If I run FileBeat from the exe I get no output at all, even with the debug on
C:\filebeat-1.2.3-windows>filebeat -c filebeat.yml -configtest -d "*"