IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« If something went wrong Migrating from a Deprecated Filebeat Module »
Elastic Docs ›Filebeat Reference [8.15] ›How to guides ›Migrate log input configurations to filestream

Debugging on Kibana

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Debugging on Kibana

edit

Events produced by filestream with take_over: true contains take_over tag. You can filter on this tag in Kibana and see the events which came from a filestream in the "take over" mode.

« If something went wrong Migrating from a Deprecated Filebeat Module »