Hi,
I'm installing filebeat 5.3 from the instructions here:
https://www.elastic.co/guide/en/beats/filebeat/5.3/setup-repositories.html
Running the command:
/usr/share/filebeat/bin/filebeat -configtest -e -c /etc/filebeat/filebeat.yml
Which gives me an output of:
2017/03/31 12:06:50.154405 beat.go:285: INFO Home path: [/usr/share/filebeat/bin] Config path: [/usr/share/filebeat/bin] Data path: [/usr/share/filebeat/bin/data] Logs path: [/usr/share/filebeat/bin/logs]
2017/03/31 12:06:50.154453 beat.go:186: INFO Setup Beat: filebeat; Version: 5.3.0
2017/03/31 12:06:50.154568 metrics.go:23: INFO Metrics logging every 30s
2017/03/31 12:06:50.154572 logstash.go:90: INFO Max Retries set to: 3
2017/03/31 12:06:50.154671 outputs.go:108: INFO Activated logstash as output plugin.
2017/03/31 12:06:50.154750 publish.go:295: INFO Publisher name: [servername]
2017/03/31 12:06:50.154908 async.go:63: INFO Flush Interval set to: 1s
2017/03/31 12:06:50.154922 async.go:64: INFO Max Bulk Size set to: 2048
2017/03/31 12:06:50.155030 modules.go:93: ERR Not loading modules. Module directory not found: /usr/share/filebeat/bin/module
2017/03/31 12:06:50.155069 config.go:114: INFO Additional config files are fetched from: /etc/filebeat/conf.d
2017/03/31 12:06:50.155123 config.go:87: INFO Additional configs loaded from: /etc/filebeat/conf.d/app_config.yml
Config OK
Now, I can see that the modules folder is in /usr/share/filebeat/module
, so I don't know why it's looking under bin/
, especially since there doesn't even seem to be a command line flag to set this folder. Any ideas?
My filebeat.yml looks like this:
filebeat:
config_dir: /etc/filebeat/conf.d
output:
logstash:
hosts: ["myhost:5044"]
tls:
certificate: "/etc/pki/filebeat/mydomain.com.crt"
certificate_key: "/etc/pki/filebeat/mydomain.com.key"
logging:
level: info
to_files: true
to_syslog: false
files:
path: /var/log/filebeat
name: filebeat.log
keepfiles: 7