4. Configuring Logstash - Alexandre-Guth/Elastic-Stack-FileBeat-Logspout GitHub Wiki

Configuration files

Logstash configuration files are located in /usr/share/logstash/pipeline The volume of the Logstash containerhas to be mapped accordingly on the host server. i.e.: /srv/logstash/etc:/usr/share/logstash/pipeline You can find useful configuration files templates on the Logstash directory of this Github: https://github.com/Alexandre-Guth/Elastic-Stack-FileBeat-Logspout/tree/master/Logstash And also some configuration examples on the Elastic website: https://www.elastic.co/guide/en/logstash/6.1/logstash-config-for-filebeat-modules.html#parsing-system

Beat plugins

Install Beats plugin in logstash

sudo /opt/logstash/bin/logstash-plugin install logstash-input-beats Output:

Validating logstash-input-beats Installing logstash-input-beats Installation successful