Hello! Just install filebeat (7.15.1)+postgresql module.
filebeat.yml:
output.logstash:
hosts: ["logstash.test.com:5001","logstash2.test.com:5001"]
loadbalance: true
fields:
env: prod
host_type: postgresql
fields_under_root: True
name: psql-prod1.test.com
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
keepfiles: 14
permissions: 0644
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
filebeat/modules.d/posgresql.yml:
# Module: postgresql
# Docs: https://www.elastic.co/guide/en/beats/filebeat/7.x/filebeat-module-postgresql.html
- module: postgresql
# All logs
log:
enabled: true
# Set custom paths for the log files. If left empty,
# Filebeat will choose the paths depending on your OS.
var.paths: ["/var/lib/pgsql/*/com/log/*.log*"]
I can see logs in Kibana, but there are no field log.level, but in message field I see FATAL, LOG, INFO and another levels. How I can move it in log.level field?