Unable to forward logs from windows(filebeat) to linux logstash

Elastic Stack Beats
1

Hello Everyone,

I am newbie to ELK.

I started moving some log files(*.txt) files from windows( via Filebeat) to Linux(Logstash) server.

Installed Filebeat in windows 2012.

Updated log path and added logstash ip address.

And in Logstash server installed input beats plugin and updated port number details

But still I do not see logs in Kibana.

And I see below error file in Filebeat logs:

2017-04-19T08:48:09Z INFO Starting prospector of type: log; id: 6133099517152485783
2017-04-19T08:48:09Z INFO Loading and starting Prospectors completed. Enabled prospectors: 1
2017-04-19T08:48:09Z INFO Starting Registrar
2017-04-19T08:48:09Z INFO Start sending events to output
2017-04-19T08:48:09Z INFO Starting spooler: spool_size: 2048; idle_timeout: 5s
2017-04-19T08:48:39Z INFO No non-zero metrics in the last 30s
2017-04-19T08:49:09Z INFO No non-zero metrics in the last 30s
2017-04-19T08:49:39Z INFO No non-zero metrics in the last 30s
2017-04-19T08:50:09Z INFO No non-zero metrics in the last 30s
2017-04-19T08:50:39Z INFO No non-zero metrics in the last 30s
2017-04-19T08:51:09Z INFO No non-zero metrics in the last 30s
2017-04-19T08:51:39Z INFO No non-zero metrics in the last 30s
2017-04-19T08:52:09Z INFO No non-zero metrics in the last 30s
2017-04-19T08:52:39Z INFO No non-zero metrics in the last 30s
2017-04-19T08:53:09Z INFO No non-zero metrics in the last 30s
2017-04-19T08:53:39Z INFO No non-zero metrics in the last 30s
2017-04-19T08:54:09Z INFO No non-zero metrics in the last 30s
2017-04-19T08:54:39Z INFO No non-zero metrics in the last 30s

2

Can you post your filebeat.yml. The log you send is ok. It seems that prospector is not finding any file.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.