Logstash not processign the data

Elastic Stack Logstash
1

Hello,

I am onboarding the logs and i couldn't see those logs in kibana. For example, if configured filebeat to onbaord /var/log/elk/stage1/execution/process.log , then i could see those logs in kibana but when i onboard /var/log/elk/*/execution/process.log , even after sometime , i couldn't see those logs in kibana.

2

How about you use below prospector , it should work

  • type: log
    enabled: true
    paths:
    • /var/log/elk/stage1/execution/process.log
    • /var/log/elk/stage2/execution/process.log
3

I have so many staging environments which made me to use wildcard.

Thanks

4

Which version of Filebeat?

And have you seen that the data is being sent to logstash?