Untitled - HackMD

Client主機 - Filebeat 安裝 & 設定

安裝 Filebeat
指令：yum install https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.9.2-x86_64.rpm

Image Not Showing Possible Reasons

The image file may be corrupted
The server hosting the image is unavailable
The image path is incorrect
The image format is not supported

Image Not Showing Possible Reasons

The image file may be corrupted
The server hosting the image is unavailable
The image path is incorrect
The image format is not supported

filebeat.inputs:

type: log

enabled: true

paths:
- /var/log/messages
- /var/log/*.log
- /var/log/secure
- /root/.bash_history

filebeat.config.modules:

path: ${path.config}/modules.d/*.yml
reload.enabled: false

setup.template.settings:
index.number_of_shards: 1

setup.kibana:
host: "https://192.168.120.121:5601"

output.logstash:
hosts: ["192.168.120.121:5044"]

processors:

add_host_metadata:
when.not.contains.tags: forwarded
add_cloud_metadata: ~
add_docker_metadata: ~
add_kubernetes_metadata: ~

Image Not Showing Possible Reasons

The image file may be corrupted
The server hosting the image is unavailable
The image path is incorrect
The image format is not supported

開機即啟用服務，現在即啟用服務
systemctl enable filebeat
systemctl start filebeat