Add filebeat log without logstash


#1

Hello,

I try to send my filebeat log to graylog via an input Beats. but I get nothing.
I try to use collector-sidecar but i get too many errors (colector-sidecar did not found the filebeat config in generated, and in fact this file was not created…). I use graylog 2.2
Here is my graylog config:

https://pastebin.com/FKB9DmZL

my filebeat config:

https://pastebin.com/bhrDEUZZ

I have no problems with udp syslog input, I get some data …

output of uname -a:

Linux 4.9.0-5-amd64 #1 SMP Debian 4.9.65-3+deb9u2 (2018-01-04) x86_64 GNU/Linux

tell me if you need more information,
thanks for your help !


(Tess) #2

Then unfortunately it appears you’re doing it wrong. I use FileBeat to a BEATS receiver in Graylog every day, in two clusters with multiple receivers. It works, as long as you configure it correctly.

I try to use collector-sidecar but i get too many errors

Then the question is: did you follow the manuals? Because the Sidecar is one of the easiest ways to get FileBeat and WinLogBeat into Graylog.


#3

sorry, I found the solution.
logstash was commented in filebeats.yml …

Thanks you !


(system) closed #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.