Starting Filebeat issue

Elastic Stack Beats
1

While starting Filebeat getting below error

Error:

Starting filebeat: Exiting: error unpacking config data: can not convert 'string' into 'object' accessing 'output.logstash' (source:'/etc/filebeat/filebeat.yml') accessing 'output' (source:'/etc/filebeat/filebeat.yml')

Please find the config of filebeat.yml

filebeat.inputs:

  • type: log
    enabled: true
    paths:
    • /tomcat/tomcat0/logs/catalina.out
    • /tomcat/tomcat1/logs/catalina.out
    • /tomcat/tomcat2/logs/catalina.out
      multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
      multiline.negate: true
      multiline.match: after
      output.logstash:
      hosts:["192.168.1.172:7606"]
2

Please properly format logs and configs using the </> button. Filebeat configuration is sensitive to indentation, which is difficult to see without formatting.

3

Formating using </> button means could share the EG:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.