Setup

Filebeat is the easiest way to get logs from files in your system to Logz.io, and it’s the tool we recommend for most situations.

This page is a general reference for Filebeat. If you need instructions for a specific log source (such as nginx, MySQL, or Wazuh), see Log shipping sources.

Configuration tl;dr
Files
Sample configuration
Encryption certificate
Listener
Port 5015. For help finding your region’s listener host, see Account region.
Guided configuration

You’ll need: Filebeat 7 or Filebeat 6

  1. Download the Logz.io certificate

    For HTTPS shipping, download the Logz.io public certificate to your certificate authority folder.

    sudo wget https://raw.githubusercontent.com/logzio/public-certificates/master/COMODORSADomainValidationSecureServerCA.crt -P /etc/pki/tls/certs/
    
  2. Make your configuration file

    Make your configuration file using the Filebeat configuration wizard.

    To use the Filebeat configuration wizard, click Configuration wizard on the Filebeat log shipping page. You must be logged in to Logz.io.

  3. Move the configuration file to the Filebeat folder

    Move the configuration file to /etc/filebeat/filebeat.yml.

  4. Start Filebeat

    Start or restart Filebeat for the changes to take effect.

  5. Check Logz.io for your logs

    Give your logs some time to get from your system to ours, and then open Kibana.

    If you still don’t see your logs, see log shipping troubleshooting.

  1. Download the Logz.io certificate

    For HTTPS shipping, download the Logz.io public certificate to your certificate authority folder.

    Download the Logz.io public certificate to your machine. We recommend saving to C:\ProgramData\Filebeat\COMODORSADomainValidationSecureServerCA.crt.

  2. Make your configuration file

    Make your configuration file using the Filebeat configuration wizard.

    To use the Filebeat configuration wizard, click Configuration wizard on the Filebeat log shipping page. You must be logged in to Logz.io.

  3. Move the configuration file to the Filebeat folder

    Move the configuration file to C:\Program Files\Filebeat\filebeat.yml.

  4. Restart Filebeat

    PS C:\Program Files\Filebeat> Restart-Service filebeat
    
  5. Check Logz.io for your logs

    Give your logs some time to get from your system to ours, and then open Kibana.

    If you still don’t see your logs, see log shipping troubleshooting.