Filebeat

Send logs to Timber via Filebeat

Filebeat is a general purpose log forwarder that can tail and forward log files to your Timber account.

If given the choice, we recommend Fluent Bit for it's superior performance and flexibility.

Installation

  1. Configure the elasticsearch output to point to Timber, replacing YOUR_SOURCE_ID and YOUR_API_KEY accordingly:

    output.elasticsearch:
    hosts: ["https://logs.timber.io:443"]
    path: "/sources/YOUR_SOURCE_ID/frames"
    headers:
    Authorization: Bearer YOUR_API_KEY

Limitations

Because Filebeat does not support generic HTTP endpoints we use the Elasticsearch output since Timber supports the Elasticsearch /_bulk protocol. As such, all limitations outlined in the Elasticsearch protocol apply here.