- Filebeat Reference: other versions:
- Overview
- Getting Started With Filebeat
- Step 1: Installing Filebeat
- Step 2: Configuring Filebeat
- Step 3: Configuring Filebeat to Use Logstash
- Step 4: Loading the Index Template in Elasticsearch
- Step 5: Starting Filebeat
- Step 6: Loading the Kibana Index Pattern
- Quick Start for Common Log Formats
- Command Line Options
- Directory Layout
- Repositories for APT and YUM
- Running Filebeat on Docker
- Upgrading Filebeat
- How Filebeat Works
- Configuring Filebeat
- Modules
- Exported Fields
- Securing Filebeat
- Troubleshooting
- Migrating from Logstash Forwarder to Filebeat
WARNING: Version 5.6 of Filebeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Configuration Options (Reference)
editConfiguration Options (Reference)
editBefore modifying configuration settings, make sure you’ve completed the configuration steps in the Getting Started.
The Filebeat configuration file, filebeat.yml
, uses YAML for its syntax. See the
Config File Format section of the
Beats Platform Reference for more about the structure of the config file.
The configuration options are described in the following sections. After changing configuration settings, you need to restart Filebeat to pick up the changes.