|
@@ -4,6 +4,14 @@ filebeat.inputs:
|
|
|
paths:
|
|
|
- "/var/log/*.log"
|
|
|
exclude_lines: [".*mdnsd.*", ".*syslogd.*"]
|
|
|
+ - type: filestream
|
|
|
+ enabled: true
|
|
|
+ paths:
|
|
|
+ - "/var/log/*.json"
|
|
|
+ fields_under_root: true
|
|
|
+ json.message_key: message
|
|
|
+ fields:
|
|
|
+ tags: ["json"]
|
|
|
|
|
|
filebeat.config.modules:
|
|
|
path: ${path.config}/filebeat.modules.d/*.yml
|