Logstash not processign the data


I am onboarding the logs and i couldn't see those logs in kibana. For example, if configured filebeat to onbaord /var/log/elk/stage1/execution/process.log , then i could see those logs in kibana but when i onboard /var/log/elk/*/execution/process.log , even after sometime , i couldn't see those logs in kibana.

How about you use below prospector , it should work

  • type: log
    enabled: true
    • /var/log/elk/stage1/execution/process.log
    • /var/log/elk/stage2/execution/process.log

I have so many staging environments which made me to use wildcard.


Which version of Filebeat?

And have you seen that the data is being sent to logstash?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.