This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.
Getting started with Journalbeat »
Elastic Docs ›Journalbeat Reference [6.6]

Journalbeat overview

edit

Journalbeat overview

edit

Journalbeat is a lightweight shipper for forwarding and centralizing log data from systemd journals. Installed as an agent on your servers, Journalbeat monitors the journal locations that you specify, collects log events, and forwards them to either to Elasticsearch or Logstash.

Journalbeat is an Elastic Beat. It’s based on the libbeat framework. For more information, see the Beats Platform Reference.

Compatibility

edit

Journalbeat requires systemd v233 or later. Versions prior to systemd v233 have a defect that prevents Journalbeat from reading rotated journals.

Getting started with Journalbeat »