Starting in version 7.16, this experimental functionality has been removed. You
should use the journald input in Filebeat instead.
Journalbeat overview
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Journalbeat overview
editJournalbeat is a lightweight shipper for forwarding and centralizing log data from systemd journals. Installed as an agent on your servers, Journalbeat monitors the journal locations that you specify, collects log events, and forwards them to either to Elasticsearch or Logstash.
Journalbeat is an Elastic Beat. It’s
based on the libbeat framework. For more information, see the
Beats Platform Reference.