WARNING: Version 5.0 of Packetbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Configuration Options (Reference)
editConfiguration Options (Reference)
editBefore modifying configuration settings, make sure you’ve completed the configuration steps in the Getting Started.
The Packetbeat configuration file, packetbeat.yml, uses YAML for its syntax.
The configuration options are described in the following sections. After changing
configuration settings, you need to restart Packetbeat to pick up the changes.
- Network Device Configuration
- Flows Configuration
- Transaction Protocols Configuration
- Monitored Processes Configuration
- General Configuration
- Processors Configuration
- Elasticsearch Output Configuration
- Logstash Output Configuration
- Kafka Output Configuration
- Redis Output Configuration
- File Output Configuration
- Console Output Configuration
- SSL Configuration
- Paths Configuration
- Logging Configuration
- Run Options Configuration
Packetbeat maintains a real-time topology map of all the servers in your network. See Maintaining the Real-Time State of the Network Topology for more details.