PS D:\filebeat-7.14.2-windows-x86_64> .\install-service-filebeat.ps1
__GENUS          : 2

__CLASS          : __PARAMETERS

__SUPERCLASS     :

__DYNASTY        : __PARAMETERS

__RELPATH        :

__PROPERTY_COUNT : 1

__DERIVATION     : {}

__SERVER         :

__NAMESPACE      :

__PATH           :

ReturnValue      : 5

PSComputerName   :
__GENUS          : 2

__CLASS          : __PARAMETERS

__SUPERCLASS     :

__DYNASTY        : __PARAMETERS

__RELPATH        :

__PROPERTY_COUNT : 1

__DERIVATION     : {}

__SERVER         :

__NAMESPACE      :

__PATH           :

ReturnValue      : 0

PSComputerName   :
Status      : Stopped

Name        : filebeat

DisplayName : filebeat

# ============================== Filebeat inputs ===============================

filebeat.inputs:

type: log
Change to true to enable this input configuration.
enabled: true
Paths that should be crawled and fetched. Glob based paths.
paths:

C:\Apache24\logs*



============================== Filebeat modules ==============================
filebeat.config.modules:
Glob pattern for configuration loading
path: ${path.config}/modules.d/*.yml
Set to true to enable config reloading
reload.enabled: false
Period on which files under path should be checked for changes
#reload.period: 10s
======================= Elasticsearch template setting =======================
setup.template.enabled: false

setup.ilm.enabled: false

#template setting's value is set to false by default. If you set it to true, an error will be reported when the configuration is submitted
================================== General ===================================
The name of the shipper that publishes the network data. It can be used to group
all the transactions sent by a single shipper in the web interface.
#name:
The tags of the shipper are included in their own field with each
transaction published.
#tags: ["service-X", "web-tier"]
Optional fields that you can specify to add additional information to the
output.
#fields:
env: staging
================================= Processors =================================
processors:

add_host_metadata:

when.not.contains.tags: forwarded

================================== Logging ===================================
Sets log level. The default log level is info.
Available log levels are: error, warning, info, debug
logging.level: debug
At debug level, you can selectively enable logging only for some components.
To enable all selectors use ["*"]. Examples of other selectors are "beat",
"publisher", "service".
#logging.selectors: ["*"]

############################# output ######################################

output.elasticsearch:
Array of hosts to connect to.
allow_older_versions: true

protocol: "http"

hosts: ["http://index-<rm>.ap-beijing.qcloudes.com:80"]
Authentication credentials - either API key or username/password.
username: "elastic"

password: "<rm>"

indices:

index: apache_logs-<rm>

when.equals:

fields.type: log

setup.dashboards.enabled: true

setup.kibana:

host: "https://index-<rm>-internal.kibana.qcloudes.com:443"

space.id: "index-<rm>"

D:\filebeat-7.14.2-windows-x86_64>filebeat.exe modules enable apache

Module apache doesn't exist!

D:\filebeat-7.14.2-windows-x86_64>.\filebeat.exe setup

ILM policy and write alias loading not enabled.

Template loading not enabled.

Index setup finished.

Loading dashboards (Kibana must be running and reachable)

Loaded dashboards

Setting up ML using setup --machine-learning is going to be removed in 8.0.0. Please use the ML app instead.

See more: https://www.elastic.co/guide/en/machine-learning/current/index.html

Loaded machine learning job configurations

Loaded Ingest pipelines