Unable to send logs to logstash


  • input_type: log
    • /home/niked/Downloads/tom.log
      document_type: prepaid_logs
      pattern => "^%{TIMESTAMP_ISO8601} "
      negate => true
      what => previous
      hosts: ["localhost:5044"]

This is my filebeat config but i am unable to send logs to filebeat.
Help would be really appreciated

Please format the config correctly using the tools in the editor. Yaml is sensitive to indentation so it is hard to tell what is right and wrong when config is not correctly formatted.

@Christian_Dahlqvist thankyou for the reply
Please have a look at the screenshot

Use the </>-button to format configs. Please, no screenshots (I can barely read the text in the screenshot).

You can not use %{...} in filebeat multiline. You will have to configure a regular expression to match the format you're actually expecting.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.