Problem configuring "Custom configurations" in the "Custom Logs" integration of Elastic Agent

Elastic Stack Elastic Agent
1

Hello,

we are trying to replace our filebeat configuration using the new elastic agent.

We had no problem to ingest the logs (we are using the Custom Logs integration), we have problem when we try to add custom properties available in filebeat.

There is no documentation on the internet about what can be entered in "Custom configurations".

We were able to define the following properties:

pipeline: <ingest_pipeline_name>
multiline:
  type: pattern
  pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
  negate: true
  match: after

We would like to have the ability to define the following two properties present in filebeat:

ignore_older: 48h
exclude_files: ['\.gz$']

By inserting them at the root level, the last two configurations are not considered by the agent.

Elastic Version: 8.7.0
Custom Logs Version: 1.1.2

Thank you,
Emilio

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.