Skip to content

Logging of Third-Party Tools on Linux

As of version 7.16.1 the logging of data of third-party tools in SEAL Elastic Stack is disabled by default. You can reactivate it, if required.

Hint - log settings

This chapter describes how you manage the log data of the third-party tools in the Elasticsearch database.

For details on the configuration of the log level or the data that are to be logged, see the corresponding documentation of the third-party tool.

To reactivate the storing of the log data of third-party tools, open the following file on the PLOSSYS 5 server and follow the descriptions below.

/opt/seal/etc/filebeat.yml

MongoDB

  1. In the filebeat.modules section, activate the mongodb filebeat module by changing the enabled key from false to true:

    #------------------------------- Mongodb Module -------------------------------
- module: mongodb
  # Logs
  log:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths:
      - /var/log/seal/mongod.log

  2. In the Kibana user interface, check the MongoDB messages:

    http://localhost:5601/app/discover#/?_g=(filters:!(),query:(language:kuery,query:''),refreshInterval:(pause:!t,value:0),time:(from:now-1y%2Fd,to:now))&_a=(columns:!(log.file.path,event.module),filters:!(('$state':(store:appState),meta:(alias:!n,disabled:!f,index:seal-plossys-5-log,key:event.module,negate:!f,params:(query:mongodb),type:phrase),query:(match_phrase:(event.module:mongodb)))),index:seal-plossys-5-log,interval:auto,query:(language:kuery,query:''),sort:!(!('@timestamp',desc)))

Kibana

  1. In the filebeat.modules section, activate the kibana filebeat module by changing the enabled key from false to true:

    #-------------------------------- Kibana Module --------------------------------
- module: kibana
  # Server logs
  log:
  log:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths:
      - /var/log/seal/seal-kibana.log

  2. In the Kibana user interface, check the MongoDB messages:

    http://localhost:5601/app/discover#/?_g=(filters:!(),query:(language:kuery,query:''),refreshInterval:(pause:!t,value:0),time:(from:now-1y%2Fd,to:now))&_a=(columns:!(log.file.path,event.module),filters:!(('$state':(store:appState),meta:(alias:!n,disabled:!f,index:seal-plossys-5-log,key:event.module,negate:!f,params:(query:mongodb),type:phrase),query:(match_phrase:(event.module:kibana)))),index:seal-plossys-5-log,interval:auto,query:(language:kuery,query:''),sort:!(!('@timestamp',desc)))

Other Third-Party Tools

Check the values of the exclude_files key and remove the names of the log files you need from the list:

filebeat:
  inputs:
    - type: log
      paths:
        - /var/log/seal/*.log
      exclude_files: 
        - mongod.log
        - seal-filebeat.log
        - seal-kibana.log
        - seal-keycloak.log
Back to top