This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Configure Packetbeat
editConfigure Packetbeat
editTo get started quickly, read Quick start: installation and configuration.
To configure Packetbeat, edit the configuration file. The default
configuration file is called packetbeat.yml. The location of the file
varies by platform. To locate the file, see Directory layout.
There’s also a full example configuration file called packetbeat.reference.yml
that shows all non-deprecated options.
See the Config File Format for more about the structure of the config file.
The following topics describe how to configure Packetbeat: