Loading

Simplified log ingestion

There is a simplified option for ingesting log files with Elastic Agent. The simplest input configuration to ingest the file /var/log/my-application/log-file.log is:

inputs:
  - type: filestream 1
    id: unique-id-per-input 2
    paths: 3
      - /var/log/my-application/log-file.log
  1. The input type must be filestream.
  2. A unique ID for the input.
  3. An array containing all log file paths.

For other custom options to configure the input, refer to the filestream input in the Filebeat documentation.