Filebeat configuration for ELK
Filebeat Configuration for ELK Stack Filebeat is a log shipper which can be used for linux and windows both. It is generally use for sending the logs to the server. As I am using filebeat for my ELK stack (ubuntu server), So filebeat sends logs to the logstash server. While communicating with filebeat, logstash use lumberjack protocol. Installation steps : first you have to add the beats repository for APT : Run the following commands: $ wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - $ echo "deb https://artifacts.elastic.co/packages/5.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-5.x.list After this install the filebeat package $ sudo apt-get update $ sudo apt-get install filebeat After installation next step is configuration of filebeat Here we are configuring filebeat to sends logs to the logstash server. The configuration file of filebeat is in the /etc/filebeat dire