Category "filebeat"

Can I configure filebeat decode_xml to start part way down the XML tree?

I have an XML field in my logfile that filebeat is parsing. I want to keep the original full field, but decode the field part way down. eg: <myfield> &l

Logstash with persistent queue

I have started logstash using following configurations: Inside logstash.yml: queue.type: persisted queue.max_bytes: 8gb queue.checkpoint.writes: 1 configura

Filebeat vs packetbeat for web traffic analysis

I have a web server and I need to analyze the traffic and find potential anomalies in it. My first idea was to use filebeat to take the apache web access logs a

Is it possible to configure multiple output for a filebeat?

In one of our applications we parse the application logs using logstash and indexing them into elasticsearch. Our simple architecture is logfiles ---> filebe

Running filebeat on docker

i'm trying to install elk and filebeat on docker, well i uploaded the image of elk and it worked i can go to the kibana dashboard and view elastic ,... Now I wa