To get started quickly, read Quick start: installation and configuration.
To configure Filebeat, edit the configuration file. The default
configuration file is called
filebeat.yml. The location of the file
varies by platform. To locate the file, see Directory layout.
There’s also a full example configuration file called
that shows all non-deprecated options.
See the Config File Format for more about the structure of the config file.
The following topics describe how to configure Filebeat:
- General settings
- Project paths
- Config file loading
- Index lifecycle management (ILM)
- Elasticsearch index template
- Kibana endpoint
- Kibana dashboards
- Internal queue
- HTTP endpoint
- Regular expression support
- Feature flags