1

I have installed ElasticSearch, LogStash and Kibana on my master server following the articles:

And on the slave server I installed filebeat, now I am trying to configure apache2 module so I can load my apache/tomcat logs following https://www.elastic.co/guide/en/beats/filebeat/5.3/filebeat-modules-quickstart.html as pre-req I installed ingest-geoip/user-agent on the master server. When I look for modules folder under filebeat installation on the slave I can't find it. When I run the command it just hangs and nothing is showing up even in logs. How can I install the module or how I can get apache logs so it is showing on my Kibana install.

I tried to look for modules.d specified here also nothing is there under filesbeats install:

https://www.elastic.co/guide/en/beats/filebeat/master/configuration-filebeat-modules.html

Folder structure:

/etc/filebeat

  3527 Dec 20 16:11 filebeat.yml

ls -tl /usr/share/filebeat/

total 12

drwxr-xr-x. 3 root root 4096 Dec 20 15:37 bin

drwxr-xr-x. 2 root root 4096 Dec 20 15:15 scripts

-rw-r--r--. 1 root root  811 Dec  6  2016 README.md


ls -tl

total 12

drwxr-xr-x. 3 root root 4096 Dec 20 15:37 bin

drwxr-xr-x. 2 root root 4096 Dec 20 15:15 scripts

-rw-r--r--. 1 root root  811 Dec  6  2016 README.md


ls -tl bin

total 15720

drwxr-xr-x. 2 root root     4096 Dec 20 15:37 data

-rwxr-xr-x. 1 root root 14908662 Dec  6  2016 filebeat

-rwxr-xr-x. 1 root root  1179764 Dec  6  2016 filebeat-god

 ls -tl bin/data

total 0


ls -tl scripts/

total 11988

-rwxr-xr-x. 1 root root 12257380 Dec  6  2016 import_dashboards

-rwxr-xr-x. 1 root root    14397 Dec  6  2016 migrate_beat_config_1_x_to_5_0.py

Any idea how to fix this? Thanks.

  • 1
    what is your filebeat configuration ? Hard to tell what could be misconfigured when you don't give what is configured or which command you're trying to run. – Tensibai Dec 21 '17 at 14:36
  • Found the answer: rather than following the article on how to install filebeat use the following: curl -L -O artifacts.elastic.co/downloads/beats/filebeat/… sudo rpm -vi filebeat-5.3.3-x86_64.rpm and then install it using rpm -ivh filebeat-5.3.3-x86_64.rpm It now has module folder under filebeat and you can use devops.stackexchange.com/questions/817/… to configure filebeat. Thanks. – penumalla Dec 21 '17 at 14:36
  • If this solved everything for you, please post your comment as an answer and mark that answer as 'solved'. – THelper Dec 22 '17 at 8:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.