#output.elasticsearch: # hosts: ["https://es.example.net:9200"] output.file: path: "/var/lib/filebeat/file-output" filename: "filebeat-events" rotate_every_kb: 10240 number_of_files: 7 permissions: 0600 rotate_on_startup: true