Is this the configuration for modules? # = Filebeat modules =
# Add your filters / logstash plugins configuration hereĭocument_type => think the fault is in the first piece, because I can't run filebeat in debug mode,it appears:įilebeat -e filebeat: the order was not foundįilebeat -e -c filebeat.yml filebeat: the order was not found #ssl.certificate: "/etc/pki/client/cert.pem" # Certificate for SSL client authentication # List of root certificates for HTTPS server verifications # Period on which files under path should be checked for changes # matching any regular expression from the list. It is going to replace log input in the future. # Paths that should be crawled and fetched. # Change to true to enable this input configuration. # Below are the input specific configurations. # you can use different inputs for various configurations. Most options can be set at the input level, so If you need more conf files, i would show whatever you need To answer your answer, apache is in the client I don't know if I have to change something in the server's nf file, but I'll leave you as I have both files, in case it can help you On the client I have installed filebeat, and I have a connection with the server, and with logstash because it listens for telnet on port 5044īut kibana, it does not collect the logs that I indicate in the filebeat.yml file of the client I want to connect it with smultiple clients so that they collect some Apache logs. Yes, as I have explained I have ELK running in a container and this one, on a server. I was wrong about Filebeat, i only have it on my client. cluster.initial_master_nodes=elasticsearchĬommand: logstash -f /config-dir/nf Image: /elasticsearch/elasticsearch:7.8.0 I have looked at several guides but it has not been clear to me.
FILEBEATS CREATING A PACKAGE INSTALL
I guess I have to install filebeat on the client and connect it to the server, this on every client I want to have, but how do I configure the filebeat.yml file?Ĭan I connect them even though one of the filebeats is in docker and the other is not?Ībout the server, do I just have to modify the filebeat.yml file? the file docker-compose? Now what I want is to connect multiple servers with apache, which are going to be the clients, in this filebeat that I previously said was in docker, and it works correctly. I'm new to elk and i want to and I want to connect my elk stack with filebeat in docker, which I already have created in docker and it is creating the records for me, because I can see them in kibana.
0 kommentar(er)
