filebeat.yml config for apache log shipping to logz.io

filebeat.yml

############################# Filebeat #####################################
filebeat:
  prospectors:
    -
      paths:
        - /var/log/httpd/access_log
      fields:
        logzio_codec: plain
        token: LOGZIO-TOKEN
      fields_under_root: true
      ignore_older: 3h
      document_type: apache_access
    -
      paths:
        - /var/log/httpd/error_log
      fields:
        logzio_codec: plain
        token: LOGZIO-TOKEN
      fields_under_root: true
      ignore_older: 3h
      document_type: apache_error

  registry_file: /var/lib/filebeat/registry
############################# Output ##########################################
output:
  logstash:
    hosts: ["listener.logz.io:5015"]
    ssl:
      certificate_authorities: ['/etc/pki/tls/certs/COMODORSADomainValidationSecureServerCA.crt']