/usr/share/filebeat/bin/filebeat --path.config /etc/filebeat/ -v -e -d "config"
2018-04-09T14:50:13.070+0100    INFO    instance/beat.go:468    Home path: [/usr/share/filebeat/bin] Config path: [/etc/filebeat/] Data path: [/usr/share/filebeat/bin/data] Logs path: [/usr/share/filebeat/bin/logs]
2018-04-09T14:50:13.212+0100    INFO    instance/beat.go:475    Beat UUID: 0babc050-0364-4107-8a90-66893401a42e
2018-04-09T14:50:13.213+0100    INFO    instance/beat.go:213    Setup Beat: filebeat; Version: 6.2.3
2018-04-09T14:50:13.213+0100    INFO    pipeline/module.go:76   Beat name: elastic01
2018-04-09T14:50:13.214+0100    ERROR   fileset/modules.go:95   Not loading modules. Module directory not found: /usr/share/filebeat/bin/module
2018-04-09T14:50:13.214+0100    INFO    instance/beat.go:301    filebeat start running.
2018-04-09T14:50:13.214+0100    INFO    registrar/registrar.go:108      Loading registrar data from /usr/share/filebeat/bin/data/registry
2018-04-09T14:50:13.229+0100    INFO    [monitoring]    log/log.go:97   Starting metrics logging every 30s
2018-04-09T14:50:13.255+0100    INFO    registrar/registrar.go:119      States Loaded from registrar: 1
2018-04-09T14:50:13.255+0100    WARN    beater/filebeat.go:261  Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
2018-04-09T14:50:13.255+0100    INFO    crawler/crawler.go:48   Loading Prospectors: 1
2018-04-09T14:50:13.271+0100    INFO    log/prospector.go:111   Configured paths: [/TEST/*.log]
2018-04-09T14:50:13.361+0100    INFO    crawler/crawler.go:82   Loading and starting Prospectors completed. Enabled prospectors: 1
2018-04-09T14:50:13.361+0100    INFO    log/harvester.go:216    Harvester started for file: /TEST/sigmaworker.log
2018-04-09T14:50:13.379+0100    INFO    cfgfile/reload.go:127   Config reloader started
2018-04-09T14:50:13.383+0100    INFO    cfgfile/reload.go:219   Loading of config files completed.
2018-04-09T14:50:43.469+0100    INFO    [monitoring]    log/log.go:124  Non-zero metrics in the last 30s        {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":100,"time":103},"total":{"ticks":2170,"time":2176,"value":2170},"user":{"ticks":2070,"time":2073}},"info":{"ephemeral_id":"35a8a5d2-a498-4971-a772-09db08d5064e","uptime":{"ms":30260}},"memstats":{"gc_next":11501312,"memory_alloc":6032240,"memory_total":316232272,"rss":22675456}},"filebeat":{"events":{"active":4117,"added":81969,"done":77852},"harvester":{"open_files":1,"running":1,"started":1}},"libbeat":{"config":{"module":{"running":0},"reloads":1},"output":{"events":{"acked":77824,"active":4096,"batches":40,"total":81920},"read":{"bytes":234},"type":"logstash","write":{"bytes":2170579}},"pipeline":{"clients":1,"events":{"active":4117,"filtered":28,"published":81940,"retry":2048,"total":81969},"queue":{"acked":77824}}},"registrar":{"states":{"current":1,"update":77852},"writes":40},"system":{"cpu":{"cores":1},"load":{"1":1.12,"15":0.13,"5":0.3,"norm":{"1":1.12,"15":0.13,"5":0.3}}}}}}