Category "filebeat"

Is it possible to define two ILM policies in single filebeat.yml

I'd like to know if it is feasible to configure FileBeat in following way: I have single rabbitmq with several MQTT topics. I'd like to save messages from topic

Configure multiline from filebeat tomcat module

I'm using filebeat 7.15 with tomcat module to send logs to kibana. I'm trying to send exceptions as one message. My tomcat.yml configuration looks like this. -

question on multiline.pattern different examples

new to filebeat and multiline.pattern configuration as a whole. I was reading up on multiline.pattern examples and came across this multiline.pattern examples.

Connecting filebeat to elasticsearch using docker: Connection refused

I am new to the forum as well as elk stack. I tried setting up the elk stack using docker.I was successful and then I added filebeat to the compose file. Ever s

Should I prefer beats or Elastic Agent for monitoring application deployed using docker stack and not kubernetes?

I have an application up and running in set of docker containers (deployed using docker stack and not kubernetes). I want to do performance monitoring for this

Not able to filter on log message in kibana but able to see the logs

I am using filebeat, elasticsearch, kibana to ship and view logs on ec2. all the three services are working fine and I am able to see the logs on kibana. But w

FileBeat not sending data to ElasticSearch Kibana

I'm unable to receive data in the Kibana dashboard from the Filebeat agent. I'm using self-managed ELK with AWS EC2 server. Below is my filebeat.yml filebeat.in

Elasticsearch: Alert on New IP Address

I've been stuck in a problem for 3 days now..I am trying to alert on new IP address but the format of log file is not helping me so I've used a pipeline to par

Can I configure filebeat decode_xml to start part way down the XML tree?

I have an XML field in my logfile that filebeat is parsing. I want to keep the original full field, but decode the field part way down. eg: <myfield> &l

Logstash with persistent queue

I have started logstash using following configurations: Inside logstash.yml: queue.type: persisted queue.max_bytes: 8gb queue.checkpoint.writes: 1 configura

Filebeat vs packetbeat for web traffic analysis

I have a web server and I need to analyze the traffic and find potential anomalies in it. My first idea was to use filebeat to take the apache web access logs a

Is it possible to configure multiple output for a filebeat?

In one of our applications we parse the application logs using logstash and indexing them into elasticsearch. Our simple architecture is logfiles ---> filebe

Running filebeat on docker

i'm trying to install elk and filebeat on docker, well i uploaded the image of elk and it worked i can go to the kibana dashboard and view elastic ,... Now I wa

Other Categories