From 3008ee20cd44f9f16a41ab9afdfdb2fcff346f86 Mon Sep 17 00:00:00 2001 From: DeDe Morton Date: Tue, 9 Aug 2022 13:49:02 -0700 Subject: [PATCH] Clarify that at least one fileset must be enabled in a filebeat module (#2053) --- docs/en/observability/ingest-logs.asciidoc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/en/observability/ingest-logs.asciidoc b/docs/en/observability/ingest-logs.asciidoc index db5f444e39..7c3b082f0d 100644 --- a/docs/en/observability/ingest-logs.asciidoc +++ b/docs/en/observability/ingest-logs.asciidoc @@ -92,7 +92,8 @@ include::{beats-repo-dir}/tab-widgets/enable-modules-widget.asciidoc[] -- . In the module config under `modules.d`, change the module settings to match -your environment. +your environment. You must enable at least one fileset in the module. +**Filesets are disabled by default.** + For example, log locations are set based on the OS. If your logs aren't in default locations, set the `paths` variable: @@ -102,6 +103,7 @@ default locations, set the `paths` variable: ---- - module: nginx access: + enabled: true var.paths: ["/var/log/nginx/access.log*"] <1> ---- --