Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ###################### Filebeat Configuration Example #########################
- # This file is an example configuration file highlighting only the most common
- # options. The filebeat.full.yml file from the same directory contains all the
- # supported options with more comments. You can use it as a reference.
- #
- # You can find the full configuration reference here:
- # https://www.elastic.co/guide/en/beats/filebeat/index.html
- #=========================== Filebeat prospectors =============================
- filebeat.prospectors:
- # Each - is a prospector. Most options can be set at the prospector level, so
- # you can use different prospectors for various configurations.
- # Below are the prospector specific configurations.
- - input_type: log
- # Paths that should be crawled and fetched. Glob based paths.
- paths:
- - /var/log/*.log
- - C:\sac4\elasticsearch\logs\*.log
- # Exclude lines. A list of regular expressions to match. It drops the lines that are
- # matching any regular expression from the list.
- #exclude_lines: ["^DBG"]
- # Include lines. A list of regular expressions to match. It exports the lines that are
- # matching any regular expression from the list.
- #include_lines: ["^ERR", "^WARN"]
- # Exclude files. A list of regular expressions to match. Filebeat drops the files that
- # are matching any regular expression from the list. By default, no files are dropped.
- #exclude_files: [".gz$"]
- # Optional additional fields. These field can be freely picked
- # to add additional information to the crawled log files for filtering
- #fields:
- # level: debug
- # review: 1
- ### Multiline options
- # Mutiline can be used for log messages spanning multiple lines. This is common
- # for Java Stack Traces or C-Line Continuation
- # The regexp Pattern that has to be matched. The example pattern matches all lines starting with [
- #multiline.pattern: ^\[
- # Defines if the pattern set under pattern should be negated or not. Default is false.
- #multiline.negate: false
- # Match can be set to "after" or "before". It is used to define if lines should be append to a pattern
- # that was (not) matched before or after or as long as a pattern is not matched based on negate.
- # Note: After is the equivalent to previous and before is the equivalent to to next in Logstash
- #multiline.match: after
- #================================ JSON =====================================
- ### JSON configuration
- # Decode JSON options. Enable this if your logs are structured in JSON.
- # JSON key on which to apply the line filtering and multiline settings. This key
- # must be top level and its value must be string, otherwise it is ignored. If
- # no text key is defined, the line filtering and multiline features cannot be used.
- #json.message_key:
- json.message_key: message
- # By default, the decoded JSON is placed under a "json" key in the output document.
- # If you enable this setting, the keys are copied top level in the output document.
- #json.keys_under_root: false
- json.keys_under_root: true
- # If keys_under_root and this setting are enabled, then the values from the decoded
- # JSON object overwrite the fields that Filebeat normally adds (type, source, offset, etc.)
- # in case of conflicts.
- json.overwrite_keys: true
- # If this setting is enabled, Filebeat adds a "json_error" key in case of JSON
- # unmarshaling errors or when a text key is defined in the configuration but cannot
- # be used.
- #json.add_error_key: false
- #================================ General =====================================
- # The name of the shipper that publishes the network data. It can be used to group
- # all the transactions sent by a single shipper in the web interface.
- #name:
- # The tags of the shipper are included in their own field with each
- # transaction published.
- #tags: ["service-X", "web-tier"]
- # Optional fields that you can specify to add additional information to the
- # output.
- #fields:
- # env: staging
- #================================ Outputs =====================================
- # Configure what outputs to use when sending the data collected by the beat.
- # Multiple outputs may be used.
- #-------------------------- Elasticsearch output ------------------------------
- output.elasticsearch:
- # Array of hosts to connect to.
- hosts: ["localhost:9200"]
- bulk_max_size : 8192
- workers: 4
- # Optional protocol and basic auth credentials.
- #protocol: "https"
- #username: "elastic"
- #password: "changeme"
- #-------------------------- Templates ----------------------------------
- # A template is used to set the mapping in Elasticsearch
- # By default template loading is enabled and the template is loaded.
- # These settings can be adjusted to load your own template or overwrite existing ones.
- # Set to false to disable template loading.
- template.enabled: true
- # Template name. By default the template name is filebeat.
- template.name: "filebeat"
- # Path to template file
- template.path: "filebeat.template.json"
- # Overwrite existing template
- #template.overwrite: true
- # If set to true, filebeat checks the Elasticsearch version at connect time, and if it
- # is 2.x, it loads the file specified by the template.versions.2x.path setting. The
- # default is true.
- template.versions.2x.enabled: false
- # Path to the Elasticsearch 2.x version of the template file.
- #template.versions.2x.path: "${path.config}/filebeat.template-es2x.json"
- # If set to true, filebeat checks the Elasticsearch version at connect time, and if it
- # is 6.x, it loads the file specified by the template.versions.6x.path setting. The
- # default is true.
- template.versions.6x.enabled: false
- # Path to the Elasticsearch 6.x version of the template file.
- #template.versions.6x.path: "${path.config}/filebeat.template-es6x.json"
- #-------------------------- Kibana output ------------------------------
- setup.kibana:
- host: "localhost:5601"
- #----------------------------- Logstash output --------------------------------
- #output.logstash:
- # The Logstash hosts
- #hosts: ["localhost:5044"]
- # Optional SSL. By default is off.
- # List of root certificates for HTTPS server verifications
- #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
- # Certificate for SSL client authentication
- #ssl.certificate: "/etc/pki/client/cert.pem"
- # Client Certificate Key
- #ssl.key: "/etc/pki/client/cert.key"
- #================================ Logging =====================================
- # Sets log level. The default log level is info.
- # Available log levels are: critical, error, warning, info, debug
- #logging.level: debug
- # At debug level, you can selectively enable logging only for some components.
- # To enable all selectors use ["*"]. Examples of other selectors are "beat",
- # "publish", "service".
- #logging.selectors: ["*"]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement