filebeat.inputs: - type: filestream id: app-logs enabled: true paths: - /var/log/myapp/*.log output.elasticsearch: hosts: ["https://es.example.net:9200"] username: "filebeat_setup" password: "${ES_SETUP_PASSWORD}" ssl.certificate_authorities: ["/etc/filebeat/certs/http-ca.crt"] setup.kibana: host: "https://kibana.example.net:5601" username: "filebeat_setup" password: "${KIBANA_SETUP_PASSWORD}" space.id: "default" ssl.certificate_authorities: ["/etc/filebeat/certs/http-ca.crt"]