Sending apache logs to elastic search

Is it mandatory to have logstash installed to send the logs to elastic search? Can the filbeat not send apache logs directly to elasticsearch?

Yes it can. Look at Filebeat Modules. I used it as an example in this blog post.

Thanks Christian. I am able to see the logs on Kibana discover section. I now want to install a watcher in ES. The path goes ~/elasticsearch-5.5.0/bin/elasticsearch-plugin and I tried
sudo /bin/elasticsearch-plugin install watcher
but it threw an error saying unknown plugin watcher. Same for license.
Any reason this could happen?

For 5.5.0 Watcher is part of X-Pack, so that is what you need to install.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.