radius.log into filebeat

[Burn Zero]

Hi Alex,

I have configured radius.log to filebeat and then filebeat ( I use
5.6.5 version ) sends it to logstash for processing. You just need to
simply install the filebeat software and then open filebeat.yml:

-
  paths:
    - /var/log/radius/radius.log
  document_type: radius_log

include_lines: ['Auth'] # this is to only ship log lines that contain
the word Auth. You can also ship specific logs similarly by adding the
keyword here.

Then you need to write the grok filter codes in the logstash to
process it and send it to elastic.

Regards,
BurnZer0

On Tue, Apr 24, 2018 at 9:58 PM, Alex Sharaz via Freeradius-Users
<freeradius-users at lists.freeradius.org> wrote:
> What might be the best way to get . the contents of radius.log into
> filebeat? I'm already generating a suitable detail  log file that the
> filebeat client processes to push radius acct/auth info into our
> logstash service ?
>
> Rgds
> alex
> p.s. 3.0.17
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html