filebeat.prospectors:

- input_type: log
  paths:
    - /var/log/*.log
    - /var/log/syslog
    - /var/log/elasticsearch/elasticsearch/*.log
    - /var/log/logstash/logstash-plain.log
    - /var/log/filebeat/filebeat
    - /var/log/metricbeat/metricbeat
    - /var/log/packetbeat/packetbeat
    - /var/log/kibana/kibana.log
    #- c:\programdata\elasticsearch\logs\*


output.logstash:
  hosts: ["localhost:5044"]

filebeat.prospectors:

- input_type: log
  paths:
    - /var/log/syslog
  document_type: syslog

- input_type: log
  paths:
    - /var/log/kibana/kibana.log
  document_type: kibana
  json.message_key: log


output.logstash:
  hosts: ["localhost:5044"]

CHANGE only submit log files we’re parsing (will add more later on)
CHANGE only submit log files we’re parsing (will add more later on)
