I am using filebeat, and auditbeat to collect the log and send it to Elastic, here is my config file filebeat.inputs: - type: filestream id: auditbeat fields: auditbeat: true paths: - /var/log/auditbeat/* parsers: - ndjson: target: "" overwrit…

[image] Filebeat Fails to Process Symlinked Log Files Despite Symlink Configuration Enabled Beats I am encountering an issue with Filebeat where it fails to process symlinked log files, even though I have configured the symlink handling to be enabled. Below are the details…

bhautik (Bhautik Chudasama) September 26, 2024, 1:01pm 2

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Unable to see combined auditbeat, filebeat indicies in elastic