Run Filebeat as either service in UNIX or Background Job

[Laker99 (KJ)]

Hello All,

Good day Hope you're doing fine. May I please take a few minutes of your time?

Q. How can I start Filebeat in background mode?
Here's what I'm dealing with,
filebeat installed in /home//filebeat
I can start filebeat in background from the console using - "nohup /home//filebeat/filebeat -c filebeat.yml &"

The problem?
The server gets rebooted every so often and I am forced to start it manually ?
Is there any way we can automate filebeat start?

Problems I'm facing,

1. If within a .sh script, I execute - "/home//filebeat/filebeat -c filebeat.yml &", I get the error - "error in initing prospector: missing field accessing 'filebeat.prospectors.0.path.0' and filebeat does not start
2. Can I install it as a service, just like in Windows? If so, how?

Hope I have stated my problem(s) to everyone's understanding. If you have any questions, please let me know.

Thank you in advance for your time and cooperation

[warkolm (Mark Walkom)]

Why not install it via a package, then it comes with the service scripts.

[Laker99 (KJ)]

Hello Mark! Thanks for your response

However, here are my issues,

1. The UNIX server I'm running Filebeat on is behind firewalls and does not have access to the outside Internet
   So, I'm unable to download any package
   I ran into the same problems when installing plugins for Logstash, so I had to download it as a .zip files on Windows and unzip them onto UNIX

Is it possible to download the service scripts for Filebeat for UNIX independently? Also, how do these work? Can you please explain briefly?

Thanks again for your time and cooperation

[warkolm (Mark Walkom)]

Why don't you just download the deb/rpm instead of the zip then?

[Laker99 (KJ)]

Hello Mark! Good day!

I was able to get around this... I wrote a shell script to start filebeat in background mode (filebeat -c filebeat.yml &) and invoke the shell script inside an autopilot configuration. One of our 3rd party S/W has an autopilot setup, where I was able to add the shell script to their .conf file.

I tried downloading the rpm/deb files, but was unable to figure out how the service works.

I really appreciate all your time and cooperation If you can tell me how and where to download the scripts to install and run filebeat as a service, whenever you get a chance, that'd be great.

Take care and wish you the very best.

[warkolm (Mark Walkom)]

If you downloaded the deb/rpm then you can install it and it automatically deploys the relevant service file for you.