Filebeat configuration for ELK
Filebeat Configuration for ELK Stack Filebeat is a log shipper which can be used for linux and windows both. It is generally use for sending the logs to the server. As I am using filebeat for my ELK stack (ubuntu server), So filebeat sends logs to the logstash server. While communicating with filebeat, logstash use lumberjack protocol. Installation steps : first you have to add the beats repository for APT : Run the following commands: $ wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - $ echo "deb https://artifacts.elastic.co/packages/5.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-5.x.list After this install the filebeat package $ sudo apt-get update $ sudo apt-get install filebeat After installation next step is configuration of filebeat Here we are configuring filebeat to sends logs to the logstash server. The configuration file o...