

In an ELK-based logging pipeline, Filebeat plays the role of the logging agent-installed on the machine generating the log files, tailing them, and forwarding the data to either Logstash for more advanced processing or directly into Elasticsearch for indexing. Filebeat, as the name implies, ships log files. Each beat is dedicated to shipping different types of information - Winlogbeat, for example, ships Windows event logs, Metricbeat ships host metrics, and so forth. What is Filebeat?įilebeat is a log shipper belonging to the Beats family - a group of lightweight shippers installed on hosts for shipping different kinds of data into the ELK Stack for analysis. This Filebeat tutorial seeks to give those getting started with it the tools and knowledge they need to install, configure and run it to ship data into the other components in the stack. Part of the fourth component to the ELK Stack (Beats, in addition to Elasticsearch, Kibana, and Logstash).


Please refer to the Logz.io Documentation for the latest informationįilebeat is probably the most popular and commonly used member of the ELK Stack. The article you are reading is not necessarily up to date with the latest features and current releases of the Logz.io Platform.
