$OpenBSD$
--- filebeat/etc/filebeat.yml.orig	Mon Feb  8 13:18:30 2016
+++ filebeat/etc/filebeat.yml	Mon Feb  8 13:22:22 2016
@@ -13,7 +13,14 @@ filebeat:
       # Make sure not file is defined twice as this can lead to unexpected behaviour.
       paths:
         - /var/log/*.log
-        #- c:\programdata\elasticsearch\logs\*
+      #  - /var/log/authlog
+      #  - /var/log/daemon
+      #  - /var/log/maillog
+	- /var/log/messages
+      document_type: syslog
+    -
+	- /var/www/logs/access.log
+      document_type: httpd
 
       # Configure the file encoding for reading files with international characters
       # following the W3C recommendation for HTML5 (http://www.w3.org/TR/encoding).
@@ -152,7 +159,7 @@ filebeat:
   # Name of the registry file. Per default it is put in the current working
   # directory. In case the working directory is changed after when running
   # filebeat again, indexing starts from the beginning again.
-  #registry_file: .filebeat
+  registry_file: /var/db/filebeat/registry
 
   # Full Path to directory with additional prospector configuration files. Each file must end with .yml
   # These config files must have the full filebeat config part inside, but only
@@ -176,7 +183,7 @@ output:
     # Scheme and port can be left out and will be set to the default (http and 9200)
     # In case you specify and additional path, the scheme is required: http://localhost:9200/path
     # IPv6 addresses should always be defined as: https://[2001:db8::1]:9200
-    hosts: ["localhost:9200"]
+    #hosts: ["localhost:9200"]
 
     # Optional protocol and basic auth credentials.
     #protocol: "https"
@@ -252,9 +259,9 @@ output:
 
 
   ### Logstash as output
-  #logstash:
+  logstash:
     # The Logstash hosts
-    #hosts: ["localhost:5044"]
+    hosts: ["127.0.0.1:5044"]
 
     # Number of workers per Logstash host.
     #worker: 1
@@ -365,26 +372,26 @@ logging:
 
   # Send all logging output to syslog. On Windows default is false, otherwise
   # default is true.
-  #to_syslog: true
+  to_syslog: false
 
   # Write all logging output to files. Beats automatically rotate files if rotateeverybytes
   # limit is reached.
-  #to_files: false
+  to_files: true
 
   # To enable logging to files, to_files option has to be set to true
   files:
     # The directory where the log files will written to.
-    #path: /var/log/mybeat
+    path: /var/log/filebeat
 
     # The name of the files where the logs are written to.
-    #name: mybeat
+    name: filebeat.log
 
     # Configure log file size limit. If limit is reached, log file will be
     # automatically rotated
-    rotateeverybytes: 10485760 # = 10MB
+    rotateeverybytes: 10485760 # = 1MB
 
     # Number of rotated log files to keep. Oldest files will be deleted first.
-    #keepfiles: 7
+    keepfiles: 7
 
   # Enable debug output for selected components. To enable all selectors use ["*"]
   # Other available selectors are beat, publish, service
@@ -393,6 +400,6 @@ logging:
 
   # Sets log level. The default log level is error.
   # Available log levels are: critical, error, warning, info, debug
-  #level: error
+  level: info
 
 
