Filebeat via sidecar: Do I need logstash?

Hi All,

I am trying to send /var/log/*.log from the same machine on which my graylog is installed. I configured a sidecar with filebeat and was trying to use the default configuration. However, it tries to send the output to logstash, and I don’t have logstash installed. If I understand correctly, graylog should be able to digest the logs itself…

So what do I have to write in the configuration, instead of:

output.logstash:
hosts: [“192.168.1.1:5044”]

Many thanks,

Oren

OK I figured that out. I have to setup a beat input in Graylog and define it as a logstash output host…

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.