Category "filebeat"

FileBeat not sending data to ElasticSearch Kibana

I'm unable to receive data in the Kibana dashboard from the Filebeat agent. I'm using self-managed ELK with AWS EC2 server. Below is my filebeat.yml filebeat.in

Elasticsearch: Alert on New IP Address

I've been stuck in a problem for 3 days now..I am trying to alert on new IP address but the format of log file is not helping me so I've used a pipeline to par

Can I configure filebeat decode_xml to start part way down the XML tree?

I have an XML field in my logfile that filebeat is parsing. I want to keep the original full field, but decode the field part way down. eg: <myfield> &l

Logstash with persistent queue

I have started logstash using following configurations: Inside logstash.yml: queue.type: persisted queue.max_bytes: 8gb queue.checkpoint.writes: 1 configura

Filebeat vs packetbeat for web traffic analysis

I have a web server and I need to analyze the traffic and find potential anomalies in it. My first idea was to use filebeat to take the apache web access logs a

Is it possible to configure multiple output for a filebeat?

In one of our applications we parse the application logs using logstash and indexing them into elasticsearch. Our simple architecture is logfiles ---> filebe

Running filebeat on docker

i'm trying to install elk and filebeat on docker, well i uploaded the image of elk and it worked i can go to the kibana dashboard and view elastic ,... Now I wa