From fe225928474b9732a3f4e53b776f3b7ebc899041 Mon Sep 17 00:00:00 2001 From: dedemorton Date: Mon, 1 Aug 2022 16:40:21 -0700 Subject: [PATCH] Clarify that at least one fileset must be enabled in a filebeat module --- docs/en/observability/ingest-logs.asciidoc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/en/observability/ingest-logs.asciidoc b/docs/en/observability/ingest-logs.asciidoc index db5f444e39..7c3b082f0d 100644 --- a/docs/en/observability/ingest-logs.asciidoc +++ b/docs/en/observability/ingest-logs.asciidoc @@ -92,7 +92,8 @@ include::{beats-repo-dir}/tab-widgets/enable-modules-widget.asciidoc[] -- . In the module config under `modules.d`, change the module settings to match -your environment. +your environment. You must enable at least one fileset in the module. +**Filesets are disabled by default.** + For example, log locations are set based on the OS. If your logs aren't in default locations, set the `paths` variable: @@ -102,6 +103,7 @@ default locations, set the `paths` variable: ---- - module: nginx access: + enabled: true var.paths: ["/var/log/nginx/access.log*"] <1> ---- --