Sending apache logs to elastic search

Elastic Stack Elasticsearch
1

Is it mandatory to have logstash installed to send the logs to elastic search? Can the filbeat not send apache logs directly to elasticsearch?

2

Yes it can. Look at Filebeat Modules. I used it as an example in this blog post.

3

Thanks Christian. I am able to see the logs on Kibana discover section. I now want to install a watcher in ES. The path goes ~/elasticsearch-5.5.0/bin/elasticsearch-plugin and I tried
sudo /bin/elasticsearch-plugin install watcher
but it threw an error saying unknown plugin watcher. Same for license.
Any reason this could happen?

4

For 5.5.0 Watcher is part of X-Pack, so that is what you need to install.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.