Filebeat might be incorrectly configured or unable to send events to the output. To resolve the issue:
If using modules, make sure the
var.pathssetting points to the file. If configuring an input manually, make sure the
pathssetting is correct.
Verify that the file is not older than the value specified by
ignore_olderis disable by default so this depends on the value you have set. You can change this behavior by specifying a different value for
Make sure that Filebeat is able to send events to the configured output. Run Filebeat in debug mode to determine whether it’s publishing events successfully:
./filebeat -c config.yml -e -d "*"