Unable to view Analytics and API Logs : Is Filebeat running well?

Very new to ES ecosystem and enjoying the learning process. I've got ES and App-Search (Self-Hosted) running on Ubuntu. The only problem now is that I cannot see API logs and Analytics in my app-search dashboard. Apparantly, filebeat was not running.

I therefore installed filebeat using

curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.5.1-amd64.deb
sudo dpkg -i filebeat-7.5.1-amd64.deb

added elasticsearch log path to filebeat.yml file in /etc/filebeat/

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /var/log/elasticsearch/*
    #- c:\programdata\elasticsearch\logs\*

then ran following commands -

sudo systemctl enable filebeat
sudo systemctl start filebeat

systemctl status filebeat outputs the following

Jan 07 14:42:09 my-server filebeat[13734]: 2020-01-07T14:42:09.866Z        INFO        [monitoring]        log/log.go:145        Non-zero metrics in the last 30s        {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":30,"tim

which makes me think that filebeat is running successfully; and tracking. But I do not see anything in my app-search dashboard.

Am I missing any step? Please help.

Update: I found out that there is a filebeat directory inside /usr/share/app-search/ . I wonder if I really needed to install filebeat separately?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.