Skip to content

Commit

Permalink
Add links to Logstash docs about working with Filebeat modules (#10859)
Browse files Browse the repository at this point in the history
  • Loading branch information
dedemorton authored Feb 25, 2019
1 parent a89b13f commit 2cdb5b1
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 4 deletions.
6 changes: 5 additions & 1 deletion filebeat/docs/modules-getting-started.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@ load the ingest pipelines manually. To do this, run the `setup` command with
the `--pipelines` option specified. If you used the
<<modules-command,`modules`>> command to enable modules in the `modules.d`
directory, also specify the `--modules` flag. For example, the following command
loads the ingest pipelines used by all metricsets enabled in the system, nginx,
loads the ingest pipelines used by all filesets enabled in the system, nginx,
and mysql modules:

// override modulename attribute so it works with the --modules option
Expand Down Expand Up @@ -134,5 +134,9 @@ and mysql modules:
PS > .{backslash}{beatname_lc}.exe setup --pipelines --modules {modulename}
----

TIP: If you're loading ingest pipelines manually because you want to send events
to {ls}, also see
{logstash-ref}/filebeat-modules.html[Working with {beatname_uc} modules].

:has_module_steps!:
:modulename!:
12 changes: 9 additions & 3 deletions libbeat/docs/shared-logstash-config.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ the {stack} getting started tutorial. Also see the documentation for the
If you want to use {ls} to perform additional processing on the data collected by
{beatname_uc}, you need to configure {beatname_uc} to use {ls}.

To do this, you edit the {beatname_uc} configuration file to disable the Elasticsearch
To do this, you edit the {beatname_uc} configuration file to disable the {es}
output by commenting it out and enable the {ls} output by uncommenting the
logstash section:

Expand All @@ -36,8 +36,14 @@ output.logstash:
The `hosts` option specifies the {ls} server and the port (`5044`) where {ls} is configured to listen for incoming
Beats connections.

For this configuration, you must <<load-template-manually,load the index template into Elasticsearch manually>>
because the options for auto loading the template are only available for the Elasticsearch output.
For this configuration, you must <<load-template-manually,load the index template into {es} manually>>
because the options for auto loading the template are only available for the {es} output.

ifeval::["{beatname_lc}"=="filebeat"]
Want to use <<filebeat-modules,{beatname_uc} modules>> with {ls}? You need to do
some extra setup. For more information, see
{logstash-ref}/filebeat-modules.html[Working with {beatname_uc} modules].
endif::[]

ifndef::win-only[]
ifndef::apm-server[]
Expand Down

0 comments on commit 2cdb5b1

Please sign in to comment.