Skip to content

Logging of Third-Party Tools on Windows

As of version 7.16.1 logging data of third-party tools in SEAL Elastic Stack is disabled by default. You can reacivate it, if required.

Hint - log settings

This chapter describes how you manage the log data of the third-party tools in the Elasticsearch database.

For details on the configuration of the log level or the data that are to be logged, see the corresponding documentation of the third-party tool.

To reactivate the storing of the log data of third-party tools, open the following file on the PLOSSYS 5 server and follow the descriptions below.

C:\ProgramData\SEAL Systems\config\filebeat.yml

MongoDB

In the filebeat.modules section, activate the mongodb filebeat module by changing the enabled key from false to true:

#------------------------------- Mongodb Module -------------------------------
- module: mongodb
  # Logs
  log:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths:
      - "[LOGDIR]mongod.log"

In the Kibana user interface, check the MongoDB messages:

http://localhost:5601/app/discover#/?_g=(filters:!(),query:(language:kuery,query:''),refreshInterval:(pause:!t,value:0),time:(from:now-1y%2Fd,to:now))&_a=(columns:!(log.file.path,event.module),filters:!(('$state':(store:appState),meta:(alias:!n,disabled:!f,index:seal-plossys-5-log,key:event.module,negate:!f,params:(query:mongodb),type:phrase),query:(match_phrase:(event.module:mongodb)))),index:seal-plossys-5-log,interval:auto,query:(language:kuery,query:''),sort:!(!('@timestamp',desc)))

Kibana

In the filebeat.modules section, activate the mongodb filebeat module by changing the enabled key from false to true:

#-------------------------------- Kibana Module --------------------------------
- module: kibana
  # Server logs
  log:
  log:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths:
      - "[LOGDIR]seal-kibana.log"

In the Kibana user interface, check the MongoDB messages:

http://localhost:5601/app/discover#/?_g=(filters:!(),query:(language:kuery,query:''),refreshInterval:(pause:!t,value:0),time:(from:now-1y%2Fd,to:now))&_a=(columns:!(log.file.path,event.module),filters:!(('$state':(store:appState),meta:(alias:!n,disabled:!f,index:seal-plossys-5-log,key:event.module,negate:!f,params:(query:mongodb),type:phrase),query:(match_phrase:(event.module:kibana)))),index:seal-plossys-5-log,interval:auto,query:(language:kuery,query:''),sort:!(!('@timestamp',desc)))

Other Third-Party Tools

Check the values of the exclude_files key and remove the names of those log files that you whish to be logged from the list:

filebeat:
  inputs:
    - type: log
      paths:
        - "C:\\ProgramData\\SEAL Systems\\log\\*.log"
      exclude_files: 
        - '-\d+T\d+\S*\.log$'
        - mongod.log
        - seal-filebeat.log
        - seal-kibana.log
        - seal-keycloak.log
Back to top