Using the Filebeat Add-in
About using Filebeat
Filebeat is an open source file harvester, used to fetch log files and feed them into Logstash, and this add-in makes it easy to add across your servers.
Add Filebeat to your application
To add Filebeat, access the add-ins menu of your application and click Filebeat under the External Addins category.
We’ll ask you for your ELK application endpoint - if you don’t have one, you can deploy one using this public Git repository.
An ELK application consists of Elasticsearch, Logstash, and Kibana. Logstash is an open source tool for collecting, parsing, and storing logs for future use. Kibana is a web interface that can be used to search and view the logs that Logstash has indexed. Both of these tools are based on Elasticsearch, which is used for storing logs
After the add-in is installed on your server(s) and configured and some logs are send to the ELK application, go to your ELK application address and you should be able to see them in the Kibana. One last thing to do is to: go to Settings > Indices tab, search for
filebeat-* and add a new index template by clicking on Create.
If no logs are coming in, make sure that port 5044 is open on your ELK application and is receiving connections!
For Docker applications this will be added to the host, not as a container.