I upgraded my filebeat from 7.6 to 8.7, then I found the filebeat logs lost in my ES. I googled and found that Beats logs are now ECS compliant, which matches my situation where the logs name is like filebeat-20230515.ndjson
.
However, I still find the logging.files.name config in filebeat 8.7. And I cannot work with this config:
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
keepfiles: 7
permissions: 0640
So, how can I use the logging.files.name now when using filebeat 8.7.1? Do I misunderstand anything?
Thanks.