curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.5.3-amd64.deb
dpkg -i filebeat-8.5.3-amd64.deb systemctl enable filebeat - abilito il modulo apache filebeat modules enable apache filebeat modules list - configuro il file /etc/filebeat/modules.d/apache.yml in modo che vengano mandati i file giusti e anche - configuro il modulo apache in elasticsearch con il comando inviato dal server:
output.elasticsearch:
# Array of hosts to connect to. hosts: ["alma01:9200"]
# Protocol - either `http` (default) or `https`. protocol: "https"
# Authentication credentials - either API key or username/password. #api_key: "id:api_key" username: "user" password: "password" ssl.verification_mode: "none" output.elasticsearch.index: "filebeat-inex"
filebeat setup --index-management --pipelines --modules apache