5.1 FileBeat Modules

Prerequisites

• FileBeat installed
• Output configured
• ELK up and running
• Beats plugins installed in Elasticsearch
• Beats plugins installed in Logstash

List the modules

sudo filebeat modules list

Enable the needed modules from the module.d directory

filebeat modules enable apache2 mysql

If the file location is different from the default system location, set the path

filebeat -e --modules nginx -M "nginx.access.var.paths=[/var/log/nginx/access.log*]"

To configure the file location in the filebeat.yml

- module: nginx
access:
var.paths: ["/var/log/nginx/access.log*"]

Modules configuration

Path
${path.config}/modules.d/*.yml

You can find useful configuration files templates on the Filebeat directory of this Github: https://github.com/Alexandre-Guth/Elastic-Stack-FileBeat-Logspout/tree/master/FileBeat

Source:
https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html