After restarting my "afserver", filebeat did not autostart.....seems I forgot:
sudo update-rc.d filebeat defaults 95 10
When I discovered this after semeral hours, I started it. But a log file was not colleted correct afterwards - in fact, filebeat does not log data from it:
Other logs seems ok:
But looking at the registry file in, I can see the status for the file:
"/var/log/ping-kaf.txt":{"source":"/var/log/ping-kaf.txt","offset":143350,"FileStateOS":{"inode":393591,"device":64513}}
And the offset (bytes read from the file) is growing:
18:36 142692 18:37 142786 18:42 143350 ... ... 18:57 144196
Filebeat logging (info) - no clue...
2016-04-04T18:52:24+02:00 INFO Harvester started for file: /var/log/ping-kaf.txt 2016-04-04T18:52:24+02:00 INFO Harvester started for file: /var/log/auth.log 2016-04-04T18:52:24+02:00 INFO Harvester started for file: /var/log/apache2/alfresco.mos-eisley.dk-access.log 2016-04-04T18:52:24+02:00 INFO Harvester started for file: /var/log/apache2/elk.mos-eisley.dk-error.log 2016-04-04T18:52:24+02:00 INFO File was truncated. Begin reading file from offset 0: /var/log/apache2/elk.mos-eisley.dk-error.log 2016-04-04T18:52:24+02:00 INFO Harvester started for file: /var/log/syslog 2016-04-04T18:52:24+02:00 INFO Harvester started for file: /var/log/apache2/elk.mos-eisley.dk-access.log 2016-04-04T18:52:24+02:00 INFO File was truncated. Begin reading file from offset 0: /var/log/apache2/elk.mos-eisley.dk-access.log 2016-04-04T18:52:24+02:00 INFO All prospectors initialised with 7 states to persist 2016-04-04T18:52:24+02:00 INFO Starting Registrar 2016-04-04T18:52:24+02:00 INFO Start sending events to output 2016-04-04T18:52:27+02:00 INFO Events sent: 2048 2016-04-04T18:52:27+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:52:32+02:00 INFO Events sent: 678 2016-04-04T18:52:32+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:52:44+02:00 INFO Events sent: 12 2016-04-04T18:52:44+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:53:07+02:00 INFO Events sent: 3 2016-04-04T18:53:07+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:53:14+02:00 INFO Events sent: 1 2016-04-04T18:53:14+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:54:07+02:00 INFO Events sent: 1 2016-04-04T18:54:07+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:54:12+02:00 INFO Events sent: 12 2016-04-04T18:54:12+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:54:27+02:00 INFO Events sent: 1 2016-04-04T18:54:27+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:55:04+02:00 INFO Events sent: 2 2016-04-04T18:55:04+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:55:12+02:00 INFO Events sent: 2 2016-04-04T18:55:12+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:55:49+02:00 INFO Events sent: 2 2016-04-04T18:55:49+02:00 INFO Registry file updated. 7 states written. 2016-04-04T18:56:04+02:00 INFO Events sent: 4 2016-04-04T18:56:04+02:00 INFO Registry file updated. 7 states written.