I have installed the ELK with Filebeat.
I followed this blog for setup : https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04#set-up-filebeat(add-client-servers)
When I tested with:
curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'
I got the result as the blog.
There are two question from my side:
- After the logstash host got the log info, where it stored?
- If I want to use the filebeat to forward the whole log file to the logstash host and stored the location which I desired, how can I config it?