Log viewing through Filebeat

Elastic Stack Beats
1

Hello there,

I am trying to explore the possibility of log viewing through Kibana dashboard.

I understand the process of setting up logs location in filebeat.yml file and then create index in kibana and then view logs from discover section.

what if I have more than one location from where l need to pick logs and then create multiple indexes to view them. how i am supposed to do that? How am I supposed to create more than one index? Because with the process I described above kibana automatically shows me the index I need to create.

please let me know!

Thanks,
Akhil

2

Filebeat lets you create multiple inputs, even of the same type (most probably log in your case). See the second example in Log input | Filebeat Reference [7.11] | Elastic.

By having multiple inputs, each input can specify different settings. One of these settings is the Elasticsearch index you want data from that input to be indexed into: Log input | Filebeat Reference [7.11] | Elastic.

Hope that helps,

Shaunak

3

Thank you Shaunak!! Appreciate your help. Will look into it

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.