Hi,
I am using ELK Stack 5.6.
In this version of a stack, I want to monitor filebeat using Elasticsearch.
One way is to add new filebeat what will scan filebeat log and send to elasticsearch.
Is there any other way to monitor ?
@pksinghal
You want to send filebeat logs themselves to Elasticsearch?
Or
You want to ship other on disk
logs via filebeat to Elasticsearch?
I want to send filebeat logs themselves to Elasticsearch?
So within your filebeat configuration file under inputs.
e.g:
filebeat.inputs:
- type: log
paths:
- /var/log/system.log
- /var/log/wifi.log
- type: log
paths:
- "/var/log/apache2/*"
Have your filebeat output log being read by filebeat itself?
Likewise, use the logstash file input:
input {
file {
path => "/var/log/system.log"
}
}
.
.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.