filebeat config example

filebeat.inputs:

- type: log
  enabled: true
  fields:
    server: nginx
    log_type: access
    env: dev
    domain: app.dev.domain.com
  paths:
    - /home/domains/app_dev/app.dev.domain.com/logs/access.log

- type: log
  enabled: true
  fields:
    server: nginx
    log_type: access
    env: prod
    domain: app.domain.com
  paths:
    - /home/domains/app/app.domain.com/logs/access.log


# cut more than 150 logs below
# ...

processors:
  - add_host_metadata: ~

output.logstash:
  hosts: ["elk.int:5044"]
  ssl.certificate_authorities: ["/usr/local/etc/filebeat/ssl/logstash-forwarder.crt"]

# error, warning, info, debug
logging.level: debug

#logging.selectors: ["*"]
logging.to_syslog: true
logging.to_files: false