Starting filebeat documentation is really confusing

Elastic Stack Beats
1

hi..
the docs in filebeat can be really confusing
for example:
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-command-line.html

"To start Filebeat, you must use the -c config/path option to specify the path to the configuration file."

why? i thought it has a default location.

in here, it states various configuration options in filebeat.yml:
https://www.elastic.co/guide/en/beats/filebeat/current/configuration-path.html#_conf

"This is the default base path for configuration files, including the main YAML configuration file", but wait, isn't this option actually defined filebeat.yml configuration ? according to this , it looks like filebeat is reading a configuration file which tells it the configuration file is in another location?

another strange thin is that all other options are identical by name to their cli counter parts,
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-command-line.html

except path.conf which in cli is - path.config

i'm attempting to use filebeat as a linux service

2

Thanks very much for identifying these issues in the documentation. In older versions of Filebeat, you had to specify the path to the config file when you started Filebeat in the foreground. This topic should have been updated when the default was added, but the topic was overlooked.

I've opened an issue in GitHub to track the doc issues that you've identified:

Please let us know if you are having any specific issues with Filebeat.

Thanks again for helping us improve the documentation.

DeDe

3

it's all part me attempting to run filebeat as a service on raspberry pi,
another issue was until i directed all output from fileBeat to /dev/null
the service start simply hanged., it's it's all fine if you allready have a
service file, but when you don't it was extremely hard to see how to
configure, you have distros for linuxes but the tar ones' don't contain the
filebeat service ones.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.