Pre-start exec /etc/init.d/filebeat start Notice I am sending a custom field called `app_version` with my log messages.Īnd finally I add an upstart script to /etc/init/nf like this: # Available log levels are: critical, error, warning, info, debug # fields added by Filebeat itself, the custom fields overwrite the default # Set to true to store the additional fields as top level fields instead # to add additional information to the crawled log files for filtering # * log: Reads every line of the log file (default) Next, replace the default filebeat config at /etc/filebeat/filebeat.yml with your own configuration. It lets you specify which log files to watch, and also optionally append custom variables to your log statements.įirst, get started using apt or yum to install Filebeat. However, let's discuss setting up Filebeat - this is a useful utility which periodically sweeps through your log files and sends them all to Logstash. Setting up a Logstash instance is beyond the scope of this article.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |