Add filebeat log without logstash



I try to send my filebeat log to graylog via an input Beats. but I get nothing.
I try to use collector-sidecar but i get too many errors (colector-sidecar did not found the filebeat config in generated, and in fact this file was not created…). I use graylog 2.2
Here is my graylog config:

my filebeat config:

I have no problems with udp syslog input, I get some data …

output of uname -a:

Linux 4.9.0-5-amd64 #1 SMP Debian 4.9.65-3+deb9u2 (2018-01-04) x86_64 GNU/Linux

tell me if you need more information,
thanks for your help !

(Tess) #2

Then unfortunately it appears you’re doing it wrong. I use FileBeat to a BEATS receiver in Graylog every day, in two clusters with multiple receivers. It works, as long as you configure it correctly.

I try to use collector-sidecar but i get too many errors

Then the question is: did you follow the manuals? Because the Sidecar is one of the easiest ways to get FileBeat and WinLogBeat into Graylog.


sorry, I found the solution.
logstash was commented in filebeats.yml …

Thanks you !

(system) closed #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.