Skip to content

Commit

Permalink
[Logs] Update data stream for streaming logs (#3406)
Browse files Browse the repository at this point in the history
  • Loading branch information
mdbirnstiehl authored Dec 4, 2023
1 parent 6bdccd8 commit e6238db
Showing 1 changed file with 7 additions and 6 deletions.
13 changes: 7 additions & 6 deletions docs/en/observability/logs-stream.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -41,14 +41,14 @@ include::{ingest-docs-root}/docs/en/ingest-management/tab-widgets/run-standalone

During installation, you're prompted with some questions:

. When asked if you want to install the agent as a service, enter `Y`.
. When asked if you want to install the agent as a service, enter `Y`.
. When asked if you want to enroll the agent in Fleet, enter `n`.

[discrete]
[[logs-stream-agent-config]]
== Step 3: Configure the {agent}

With your agent installed, configure it by updating the `elastic-agent.yml` file.
With your agent installed, configure it by updating the `elastic-agent.yml` file.

[discrete]
[[logs-stream-yml-location]]
Expand Down Expand Up @@ -76,7 +76,8 @@ inputs:
type: filestream
streams:
- id: your-log-stream-id
data_stream.dataset: generic
data_stream:
dataset: example
paths:
- /var/log/your-logs.log
----
Expand All @@ -94,8 +95,8 @@ image::images/es-endpoint-cluster-id.png[{es} endpoint and cluster id location,
NOTE: The API key format should be `<id>:<key>`. Make sure you selected *Beats* when you created your API key. Base64 encoded API keys are not currently supported in this configuration.
- `inputs.id` – A unique identifier for your input.
- `type` – The type of input. For collecting logs, set this to `filestream`.
- `streams.id` – A unique identifier for your stream of log data.
- `data_stream.dataset` – The name for your dataset data stream. Name this data stream anything that signifies the source of the data. The default value is `generic`.
- `streams.id` – A unique identifier for your stream of log data.
- `data_stream.dataset` – The name for your dataset data stream. Name this data stream anything that signifies the source of the data. In this configuration, the dataset is set to `example`. The default value is `generic`.
- `paths` – The path to your log files. You can also use a pattern like `/var/log/your-logs.log*`.

[discrete]
Expand All @@ -119,7 +120,7 @@ include::{ingest-docs-root}/docs/en/ingest-management/tab-widgets/start-widget.a
If you're not seeing your log files in {kib}, verify the following in the `elastic-agent.yml` file:

- The path to your logs file under `paths` is correct.
- Your API key is in `<id>:<key>` format. If not, your API key may be in an unsupported format, and you'll need to create an API key in *Beats* format.
- Your API key is in `<id>:<key>` format. If not, your API key may be in an unsupported format, and you'll need to create an API key in *Beats* format.

If you're still running into issues, see {fleet-guide}/fleet-troubleshooting.html[{agent} troubleshooting] and {fleet-guide}/elastic-agent-configuration.html[Configure standalone Elastic Agents].

Expand Down

0 comments on commit e6238db

Please sign in to comment.