Hi,
I am using ELK Stack 5.6.
In this version of a stack, I want to monitor filebeat using Elasticsearch.
One way is to add new filebeat what will scan filebeat log and send to elasticsearch.
Is there any other way to monitor ?
@pksinghal
You want to send filebeat logs themselves to Elasticsearch?
Or
You want to ship other on disk logs via filebeat to Elasticsearch?
I want to send filebeat logs themselves to Elasticsearch?
So within your filebeat configuration file under inputs.
e.g:
filebeat.inputs:
- type: log
  paths:
    - /var/log/system.log
    - /var/log/wifi.log
- type: log
  paths:
    - "/var/log/apache2/*"
Have your filebeat output log being read by filebeat itself?
Likewise, use the logstash file input:
input {
file {
path => "/var/log/system.log"
}
}
.
.
            This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.