Configuring Beats clients

With both Filebeat and Metricbeat installed on one of the Elasticsearch nodes, we can go ahead and configure them to feed data to both Logstash and Elasticsearch.

Filebeat YAML

Now, it is no surprise that most of the Elastic components are configured through YAML files. Filebeat is no exception to that norm, and its configuration is handled by the /etc/filebeat/filebeat.yml file.

First, we need to tell filebeat where to look for the log files that are to be shipped to Logstash. In the yaml file, this is in the filebeat.inputs section; change enabled: false to enabled: true, as follows:

#=========================== Filebeat inputs =============================
filebeat.inputs:
# Each - is an input...