Filebeat isn’t collecting lines from a fileedit

Filebeat might be incorrectly configured or unable to send events to the output. To resolve the issue:

  • Make sure the config file specifies the correct path to the file that you are collecting. See Step 2: Configure Filebeat for more information.
  • Verify that the file is not older than the value specified by ignore_older. ignore_older is disable by default so this depends on the value you have set. You can change this behavior by specifying a different value for ignore_older.
  • Make sure that Filebeat is able to send events to the configured output. Run Filebeat in debug mode to determine whether it’s publishing events successfully:

    ./filebeat -c config.yml -e -d "*"