Filing based on user experience in the field.
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-details.html#_level
level
Minimum log level. One of debug, info, warning, error or critical. If debug is used, but no selectors are configured, the * selector will be used. The default log level is error.
It looks like if everything is running fine, and no errors are logged, we do not even create the log file (at the default error level). This can be misleading so that end users may think that their logging configuration is actually incorrect. It will be nice to document this behavior.
At the debug level, it will print out all the events that are being flushed by filebeat, which is quite a useful debugging tool. And if someone wants just the # of events published (to see that it is actually doing something), level: info is the one to use. Perhaps we can also mention this as well. Thx!
Filing based on user experience in the field.
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-details.html#_level
It looks like if everything is running fine, and no errors are logged, we do not even create the log file (at the default error level). This can be misleading so that end users may think that their logging configuration is actually incorrect. It will be nice to document this behavior.
At the debug level, it will print out all the events that are being flushed by filebeat, which is quite a useful debugging tool. And if someone wants just the # of events published (to see that it is actually doing something), level: info is the one to use. Perhaps we can also mention this as well. Thx!