Hi, My architecture is as follows: Filebeat -> Logstash -> Elasticsearch I passed a number of files to filebeat. Some of which uses some modules. These modules have been given unique var.paths in their module configuration files. e.g. cisco.yml - module: cisco asa: enabled: true var.…

Hi, This issue is somehow solved when I have re-did everything from the installation to the configurations. The main difference was that I deleted the filebeat registry directory before restarting the process. Also, refer to: https://discuss.elastic.co/t/periodically-updated-log-file/117215/7 Re…

mtojek (Marcin Tojek) September 18, 2020, 9:48am 2

Please review the following thread: Parse / ship JSON file with filebeat and see if it's helpful.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Problem about using modules parsing log files while having JSON files