-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Added Filebeat Module overview and tutorial #3592
Conversation
Went for documenting FBM in a tutorial fashion. I'll follow up with a PR to create per-module docs. Part of elastic#3159.
@dedemorton fyi, I started on the docs for the FBM. Happy to either get your comments here or as edits in a future PR. |
|
||
NOTE: At the moment, Filebeat modules require using the Elasticsearch | ||
{elasticsearch}/ingest.html[Ingest Node]. In the future, Filebeat Modules will | ||
be able to also configure Logstash as a more powerful alternative to Ingest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would remove the Logstash part.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I hope that by the time we release this, we'll be able to say that we have sample Logstash configs which we can mention instead: elastic/logstash#6542
Until then, and in case that doesn't happen on time, I think it's important to let people know that we do plan to allow for migrating from Ingest Node to LS.
|
||
This also assumes you have Nginx installed and writing logs in the default | ||
location and format. If you want to monitor another service for which a module | ||
exists, feel free to adjust the tutorial. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
for which a module exists, adjust the commands in the tutorial accordingly.
Otherwise it kind of sounds like someone should thanks this tutorial
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good point, although I'll do the fix in #3598 to simplify my rebases.
Went for documenting FBM in a tutorial fashion. I'll follow up with a PR to create per-module docs. Part of elastic#3159. (cherry picked from commit 5b39cc5)
Went for documenting FBM in a tutorial fashion. I'll follow up with a PR to
create per-module docs.
Part of #3159.