i have a simple filebeat.yml which send some log from specific path to logstash
my problem is how can i activate some filebeat modules such as system on this host while the output of filebeat.yml is logstash and the modules used elasticsearch as output??
should i config multiple config file for this purpose?or should i have create multiple filebeat service ?
Which version are you using? Yes, you can use filebeat modules with logstash output. You need to use logstash pipeline for parsing. Please refer the below documentation:
Thanks for reply...right now iam using 7.3.0
so when the output of filebeat.yml is defined to logstash any activated filebeat modules send their log to logstash ?and for this purpose i can use the link you sent me,,am i right?
For 7.3.0 you can refer below document:
Logstash pipeline for parsing
Yes...document is saying this. But i did not use this. Currently i am using 6.4.0. There is slightly difference between both version. But i follow same procedure in 6.4.0. So it should work in 7.3.0 also and document is saying that.
Please read the document.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.