Filebeat might be incorrectly configured or unable to send events to the output. To resolve the issue:
- Make sure the config file specifies the correct path to the file that you are collecting. See Step 2: Configure Filebeat for more information.
- Verify that the file is not older than the value specified by
ignore_olderis disable by default so this depends on the value you have set. You can change this behavior by specifying a different value for
Make sure that Filebeat is able to send events to the configured output. Run Filebeat in debug mode to determine whether it’s publishing events successfully:
./filebeat -c config.yml -e -d "*"