Start Journalbeat by issuing the appropriate command for your platform. If you are accessing a secured Elasticsearch cluster, make sure you’ve configured credentials as described in Step 2: Configure Journalbeat.
If you use an init.d script to start Journalbeat on deb or rpm, you can’t specify command line flags (see Command reference). To specify flags, start Journalbeat in the foreground.
deb and rpm:
sudo service journalbeat start
You’ll be running Journalbeat as root, so you need to change ownership
of the configuration file, or run Journalbeat with
Journalbeat is now ready to send journal events to the defined output.
Intro to Kibana
ELK for Logs & Metrics