Already have an account? Sign In
Filebeat is a lightweight shipper that enables you to send your ActiveMQ application logs to Logstash and Elasticsearch. Configure Filebeat using the pre-defined examples below to start sending and analysing your ActiveMQ application logs.
curl -L -O https://artifacts.elastic.co/downloads/beats//-oss-7.15.1-amd64.deb sudo dpkg -i -oss-7.15.1-amd64.deb
curl -L -O https://artifacts.elastic.co/downloads/beats//-oss-7.15.1-x86_64.rpm sudo rpm -vi -oss-7.15.1-x86_64.rpm
curl -L -O https://artifacts.elastic.co/downloads/beats//-oss-7.15.1-darwin-x86_64.tar.gz tar xzvf -oss-7.15.1-darwin-x86_64.tar.gz
- Download the Windows zip file from the official downloads page.
- Extract the contents of the zip file into C:\Program Files.
- Rename the
-<version>-windowsdirectory to ``.
- Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select Run As Administrator). If you are running Windows XP, you may need to download and install PowerShell.
- Run the following commands to install as a Windows service:
cd 'C:\Program Files\' .\install-service-.ps1
PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-.ps1.
Filebeat does not currently have a module to process the ActiveMQ application logs.
Therefore we need to add the ActiveMQ application log location to the filebeat inputs.
Add the following to the end of the log input example, before the
- type: log enabled: true paths: - /path/to/log/activemq/data/activemq.log* fields: type: activemq multiline.pattern: ^\= multiline.match: before
We will be shipping to Logstash so that we have the option to run filters before the data is indexed.
Comment out the elasticsearch output block.
## Comment out elasticsearch output #output.elasticsearch: # hosts: ["localhost:9200"]
Let's check the configuration file is syntactically correct.
filebeat -e -c /etc/filebeat/filebeat.yml
Ok, time to start ingesting data!
sudo systemctl enable filebeat sudo systemctl start filebeat