Filebeat

[Kevin Sheahan]

1. Download Filebeat (OSS Version) from https://www.elastic.co/downloads/beats/filebeat-oss
2. Edit the filebeat.yml attached in this article replacing WITFOOIP with the IP address of the WitFoo Precinct All-in-One Appliance or Streamer node.
3. Extract the file from step 1 onto the machine that will be sending logs to WitFoo. The directory can be placed anywhere on the filesystem.
4. Place the edited filebeat.yml from step 2 into the folder created in step 3. This will replace the existing file in the directory.
5. Start filebeat:
   1. On Windows:
      Start-Service filebeat
   2. On Linux (deb & rpm):
      sudo service filebeat start
   3. Mac OS X & Linux:
      sudo chown root filebeat.yml
sudo ./filebeat -e

filebeat

[Author]

Posts