From the newest version of filebeat the syslog type has been removed.
If I compare the log from logstash as syslog format to the filebeat log format the following things are missing from the log which is obvious because we don't use syslog we don't have the option.
I've already read about this:
And tried as well but I couldn't see the syslog fields.
This is what I've tried:
#================================ Logging ===================================== # Sets log level. The default log level is info. # Available log levels are: error, warning, info, debug logging.level: info # At debug level, you can selectively enable logging only for some components. # To enable all selectors use ["*"]. Examples of other selectors are "beat", # "publish", "service". #logging.selectors: ["*"] logging.to_syslog: true logging.json: true
Is there any way to get back the syslog option or somehow make this work? Does it need a separated file or doest it need the syslog running as a service on the machine?