This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.
« Step 3: Load the index template in Elasticsearch Step 5: View your data in Kibana »
Elastic Docs ›Journalbeat Reference [6.5] ›Getting started with Journalbeat

Step 4: Start Journalbeat

edit

Step 4: Start Journalbeat

edit

Start Journalbeat by issuing the appropriate command for your platform. If you are accessing a secured Elasticsearch cluster, make sure you’ve configured credentials as described in Step 2: Configure Journalbeat.

If you use an init.d script to start Journalbeat on deb or rpm, you can’t specify command line flags (see Command reference). To specify flags, start Journalbeat in the foreground.

deb and rpm:

sudo service journalbeat start

linux:

sudo chown root journalbeat.yml 
sudo ./journalbeat -e

You’ll be running Journalbeat as root, so you need to change ownership of the configuration file, or run Journalbeat with --strict.perms=false specified. See Config File Ownership and Permissions in the Beats Platform Reference.

Journalbeat is now ready to send journal events to the defined output.

« Step 3: Load the index template in Elasticsearch Step 5: View your data in Kibana »