Filebeat is the easiest way to get logs from files in your system to, and it’s the tool we recommend for most situations.

This page is a general reference for Filebeat. If you need instructions for a specific log source (such as nginx, MySQL, or Wazuh), see Log shipping sources.

Configure Filebeat on Windows

Before you begin, you’ll need:

Download the public certificate

For HTTPS shipping, download the public certificate to your certificate authority folder.

Download the public certificate to C:\ProgramData\Filebeat\COMODORSADomainValidationSecureServerCA.crt on your machine.

Make your configuration file

Make your configuration file using the Filebeat configuration wizard.

Log into your account, and go to the Filebeat log shipping page to use the Filebeat Configuration Wizard.

Move the configuration file to the Filebeat folder

Move the configuration file to C:\Program Files\Filebeat\filebeat.yml.

Restart Filebeat
PS C:\Program Files\Filebeat> Restart-Service filebeat
Check for your logs

Give your logs some time to get from your system to ours, and then open Kibana.

If you still don’t see your logs, see log shipping troubleshooting.