In my journalbeat.yml file I'm using include_matches under journalbeat.inputs to restrict the logs shipped to elasticsearch by systemd.units. But... how do I also include the output I get via journalctl -k (kernel messages)?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.