![]() ![]() The yml file name should be the same as the module you enabled. Now each modules configuration file is a bit different, as all integrations have different requirements, first any microsoft module you are not interested in, you can ensure thatįor the DHCP module you then have 2 options, you can either give it a path to your DHCP logfiles, or you can configure a syslog listening port if the data is coming through syslog.Īfter this is configured and filebeat setup has been run, you can start the filebeat and your logs should be available to you, easiest way to check this, is to for example go to Stack Management on your left sidebar menu and click Index Management, that will show you if data is coming in. If you want to find out exactly what is sending you data, you can use for example the Discovery page, which is almost at the top of the left sidebar menu. Make sure filebeat-* is chosen at the top left, and start typing a filter/search at the top, for example event.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |