I've got a machine with many Apache servers on it.
The Apache logs got into different directories,
If I enable modules this will use the default paths, which obviously wont find these files.
I can update the var.paths for both access and errors to include each hosts' log files.
But I was contemplating adding tags, like host1, so these files are grouped together.
The https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-modules.html documentation says using modules is optional and that I can configure these manually. Yet there is no documentation that tells me what the modules do so that I can apply this manually.
I can look into the source of the Apache module at https://github.com/elastic/beats/tree/master/filebeat/module/apache but I can't work out how to re-use
ingest/default.json from a manual configuration.
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#_literal_pipeline_literal says I need the
pipeline ID but there are no pipelines defined in my Kibana console. Perhaps because I haven't yet enable Apache logging...
What is the correct way to setup filebeats to monitor multiple Apache servers?