Search code examples
apacheelasticsearchkibanafilebeat

Apache2 module Filebeat

I'm following this documentation https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-apache2.html in order to connect an apache web server access log file using file beat to elasticsearch, everything was ok until I changed the path of apache2.yml I got the following error :

2018-09-22T14:21:55.791+0100    ERROR   instance/beat.go:691    Exiting: 1 error: error
loading config file: invalid config: yaml: line 3: found unknown escape character
Exiting: 1 error: error loading config file: invalid config: yaml: line 3: found unknown escape character

this id apache2.yml configuration file : 

    - module: apache2
  access:
    enabled: true
    var.paths: ["‪C:\Program Files\filebeat-6.3.2-windows\logs\Apache\Access.log"]
Solution

  • If you are using double quotes in 

    "‪C:\Program Files\filebeat-6.3.2-windows\logs\Apache\Access.log"

    you need to escape the backslash characters

    "‪C:\\Program Files\\filebeat-6.3.2-windows\\logs\\Apache\\Access.log"