{"id":31006,"date":"2022-08-11T20:31:47","date_gmt":"2022-08-11T20:31:47","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=31006"},"modified":"2025-05-04T06:12:22","modified_gmt":"2025-05-04T06:12:22","slug":"how-to-configure-elastic-filebeat-8-3-with-elasticseach","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/how-to-configure-elastic-filebeat-8-3-with-elasticseach\/","title":{"rendered":"How to configure Elastic filebeat 8.3 with Elasticseach?"},"content":{"rendered":"\n

Step 1 – Download a file beat pacage<\/h2>\n\n\n
$ cd \/opt\r\n$ yum install wget -y\r\n$ wget https:\/\/artifacts.elastic.co\/downloads\/beats\/filebeat\/filebeat-8.3.3-linux-x86_64.tar.gz<\/span>\r\n$ tar -zxvf filebeat-8.3<\/span>.3<\/span>-linux-x86_64.tar.gz\r\n$ cd filebeat-8.3<\/span>.3<\/span>-linux-x86_64<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Step 2 – Configure input in filebeat.yml<\/h2>\n\n\n
# Each - is an input. Most options can be set at the input level, so<\/span>\r\n# you can use different inputs for various configurations.<\/span>\r\n# Below are the input specific configurations.<\/span>\r\n\r\n# filestream is an input for collecting log messages from files.<\/span>\r\n- type: filestream\r\n\r\n  # Unique ID among all inputs, an ID is required.<\/span>\r\n  id: my-filestream-id\r\n\r\n  # Change to true to enable this input configuration.<\/span>\r\n  enabled: true<\/span>\r\n\r\n  # Paths that should be crawled and fetched. Glob based paths.<\/span>\r\n  paths:\r\n    - \/var<\/span>\/log\/*.log\r\n    #- c:\\programdata\\elasticsearch\\logs\\*<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\"\"<\/figure>\n\n\n\n
Step 3 – Configure output in filebeat.yml<\/h2>\n\n\n
output.elasticsearch:\r\n  hosts: [\"https:\/\/172.18.0.2:9200\"<\/span>]\r\n  username<\/span>: \"elastic\"<\/span>\r\n  password<\/span>: \"qgWrZ8dzJtp*nB4HLIHZ\"<\/span> \r\n  ssl<\/span>:\r\n    enabled: true<\/span>\r\n    ca_trusted_fingerprint<\/span>: \"069dd4ec9161d86b6299a2823c1f66c5c7a1afd47550c8521bb07e6e0c4cf329\"<\/span> <\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Step 4 – Configure Kibana in filebeat.yml<\/h2>\n\n\n
  setup.kibana:\r\n    host: \"172.18.0.3:5601\"<\/span> \r\n    username<\/span>: \"elastic\"<\/span>  \r\n    password<\/span>: \"{qgWrZ8dzJtp*nB4HLIHZ}\"<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Step 5 – To test your configuration file<\/h2>\n\n\n
$ .\/filebeat test config -e<\/code><\/span><\/pre>\n\n\n
Step 6 – Setup Assets<\/h2>\n\n\n
Filebeat comes with<\/span> predefined assets for<\/span> parsing, indexing, and visualizing your data. To load these assets:\r\n$ .\/filebeat setup -e<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
Step 7 – Start the filebeat daemon<\/h2>\n\n\n
$ sudo chown root filebeat.yml \r\n$ sudo .\/filebeat -e -c filebeat.yml\r\n<\/code><\/span><\/pre>","protected":false},"excerpt":{"rendered":"
Step 1 – Download a file beat pacage Step 2 – Configure input in filebeat.yml Step 3 – Configure output in filebeat.yml Step 4 – Configure Kibana in filebeat.yml Step 5 – To test your configuration file Step 6 – Setup Assets Step 7 – Start the filebeat daemon<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","_joinchat":[],"footnotes":""},"categories":[5936],"tags":[],"class_list":["post-31006","post","type-post","status-publish","format-standard","hentry","category-elastic"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=31006"}],"version-history":[{"count":2,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31006\/revisions"}],"predecessor-version":[{"id":31010,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/31006\/revisions\/31010"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=31006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=31006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=31006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}