Prevent from filebeat to logging to /var/messages

Elastic Stack Beats
1

Hi ,

is there any way to prevent from filebeat logging to /var/messages ? ,

it logging and sends to logstash every beat

example /var/log/messages

Mar 16 15:27:19 solrc-stg1 filebeat[20876]: 2020-03-16T15:27:19.680+0200        INFO        [monitoring]        log/log.go:145        Non-zero metrics in the last 30s        {"monitoring": {"metrics"
.....

Thanks in advance.

2

What is your Filebeat version?

You can configure the logging path using logging.files.path: https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html#_logging_files_path

3

Yes ,

adding


logging:
  level: info
  to_files: true
  to_syslog: false
  json: true
  files:
    path: '/var/log/filebeat'
    name: 'filebeat'
    keepfiles: '3'
    permissions: '0644'

and removing

 "Environment="BEAT_LOG_OPTS=-e""

solved the issue .
Thanks .

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.