Sending logs to opensearch via filebeat

Hi Team,

I have been using logstash to ingest the logs to opensearch from my linux DNS server, now my requirement is I wanted to ingest the logs via filebeat → logstash → opensearch.

Unfortunately that is not working and I really appreciate if someone can help me on this?

These are my settings and let me know if I am doing anything wrong?

filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/lib/bind/rpz.log
    - /var/lib/bind/queries.log

And logstash here is the settings

input {
  beats {
    port => 5044
  }
}
output {
        opensearch {
        hosts => ["https://127.0.0.1:16577"]
        user => admin
        password => admin
        ssl => true
        ssl_certificate_verification => false
        index => "%{[@metadata][beat]}-%{[@metadata][version]}"
                }
        }

Do you have output.logstash configured in your filebeat.yml file?
Something along the lines of:

output.logstash:
  hosts:
    logstash.example.com:5044

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.