This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« If something went wrong Migrating from a Deprecated Filebeat Module »
Elastic Docs ›Filebeat Reference [8.x] ›How to guides ›Migrate log input configurations to filestream

Debugging on Kibana

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Debugging on Kibana

edit

Events produced by filestream with take_over: true contains take_over tag. You can filter on this tag in Kibana and see the events which came from a filestream in the "take over" mode.

« If something went wrong Migrating from a Deprecated Filebeat Module »