I have been trying hard to get logs to my elk stack from a windows server using filebeat.
I can get the logs from inetpub iis logs but when i specify my logs then i couldnt get it on kibana.
Here is my filebeat.yml config:
what do the filebeat logs say about it?
also this is the logstash section so you may have a faster response if you posted here https://discuss.elastic.co/c/beats/filebeat although I'm sure one of the moderators will move it there soon if that is where it should be