Metricbeat is frequently coming down

[kiranilla (Kiran)]

HI,

The Metricbeat has been installed in Linux box(RHEL), once it installed and configured, it was working fine without any issues, but it was observed that for every 15days the metricbeat is getting down frequently not sure, why this is happening?
And i am not able to configure the logs for metric beat in metricbeat.yml file so that if any issues occurs it should log it before shutting down.

In metricbeat.yml file, in have enabled the following configuration.
In this file not able to find the log file path where it will write the loggers

#================================ Logging =====================================

# Sets log level. The default log level is info.
# Available log levels are: critical, error, warning, info, debug
logging.level: info

# At debug level, you can selectively enable logging only for some components.
# To enable all selectors use ["*"]. Examples of other selectors are "beat",
# "publish", "service".
logging.selectors: ["*"]

Could you please help me or suggest me what need to be done so that i can run continuously with out any issues. Thanks in advance.

[exekias (Carlos Pérez Aradros)]

Hi @kiranilla,

What version of Metricbeat are you using?
Do you see any error in the logs prior to metricbeat shutdown?
It could also be a memory leak, in that case, do you see metricbeat used memory growing until it's killed?

Best regards

[kiranilla (Kiran)]

Hi Carlos,

Thanks for your repsonse...

Metricbeat version i am using is 5.4.0
I am not able to see error logs (the logs folder is empty) even after configuring the logs in metricbeat.yml file with the following modifications:

#================================ Logging =====================================

# Sets log level. The default log level is info.
# Available log levels are: critical, error, warning, info, debug
logging.level: debug
logging.to_files: true
logging.to_syslog: false
logging.files:
  path: /mywizardservices/elk/elk-5.4/metricbeat-5.4.0/logs
  name: mybeat.log
  keepfiles: 7

# At debug level, you can selectively enable logging only for some components.
# To enable all selectors use ["*"]. Examples of other selectors are "beat",
# "publish", "service".
logging.selectors: ["*"]

Please let me know if any modification are required to acquire logs for metricbeat..
Not sure how to check the memory leak for metricbeat..
Can you please suggest me on this..

Thanks for you help....

Regards,
Kiran.