filebeat 7.x以后的默认日志输出到了/var/log/messages里面,这样查看日志的时候不太方便。使用如下设置可以把filebeat服务的日志输出到指定目录
设置服务日志输出路径
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
keepfiles: 7
permissions: 0644
参考:https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html