Prevent from filebeat to logging to /var/messages

Hi ,

is there any way to prevent from filebeat logging to /var/messages ? ,

it logging and sends to logstash every beat

example /var/log/messages

Mar 16 15:27:19 solrc-stg1 filebeat[20876]: 2020-03-16T15:27:19.680+0200        INFO        [monitoring]        log/log.go:145        Non-zero metrics in the last 30s        {"monitoring": {"metrics"

Thanks in advance.

What is your Filebeat version?

You can configure the logging path using logging.files.path:

Yes ,


  level: info
  to_files: true
  to_syslog: false
  json: true
    path: '/var/log/filebeat'
    name: 'filebeat'
    keepfiles: '3'
    permissions: '0644'

and removing


solved the issue .
Thanks .

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.