Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bring back default filebeat collector for windows #19195

Closed
mpfz0r opened this issue Apr 29, 2024 · 2 comments · Fixed by #19325
Closed

Bring back default filebeat collector for windows #19195

mpfz0r opened this issue Apr 29, 2024 · 2 comments · Fixed by #19325
Assignees
Milestone

Comments

@mpfz0r
Copy link
Member

mpfz0r commented Apr 29, 2024

with #15570

we removed the filebeat collector for Windows.
We should check whether that was intended, and if not, re-introduce it.

@mpfz0r mpfz0r added the bug label Apr 29, 2024
@tellistone tellistone added this to the 6.0.1 milestone Apr 30, 2024
@tellistone
Copy link

Checked with Bernd, this is fixed server-side.

@AntonEbel
Copy link
Contributor

The old Windows Filebeat configuration looks like this:

# Needed for Graylog
fields_under_root: true
fields.collector_node_id: ${sidecar.nodeName}
fields.gl2_source_collector: ${sidecar.nodeId}

output.logstash:
   hosts: ["192.168.1.1:5044"]
path:
  data: ${sidecar.spoolDir!"C:\\Program Files\\Graylog\\sidecar\\cache\\filebeat"}\data
  logs: ${sidecar.spoolDir!"C:\\Program Files\\Graylog\\sidecar"}\logs
tags:
 - windows
filebeat.inputs:
- type: log
  enabled: true
  paths:
    - C:\logs\log.log

which is not very useful in my opinion. @tellistone if we want to have a useful configuration, I think the SecCon team needs to provide one. But I don't know if we can make it to the next bugfix release then. Should I ping someone from the SecCon team or do you want to coordinate this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants