Beats (Filebeat, Metricbeat) in Elasticsearch - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the input type for Filebeat.

Elasticsearch

filebeat.inputs:
- type: [1]

Drag options to blanks, or click blank then click option'

Ametric

Bdatabase

Chttp

Dlog

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'metric' instead of 'log' for Filebeat input type.

The input type log is used in Filebeat to collect log files.

2fill in blank

medium

Complete the code to enable Metricbeat system module.

Elasticsearch

metricbeat.modules:
- module: system
  [1]: true

Drag options to blanks, or click blank then click option'

Aenabled

Bactive

Cstart

Drun

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'active' or 'start' instead of 'enabled'.

The key enabled is used to activate a Metricbeat module.

3fill in blank

hard

Fix the error in the Filebeat output configuration to send data to Elasticsearch.

Elasticsearch

output.elasticsearch:
  hosts: ["[1]"]

Drag options to blanks, or click blank then click option'

Alocalhost:9200

B127.0.0.1:5601

Clocalhost:8080

D127.0.0.1:5044

Attempts:

3 left

💡 Hint

Common Mistakes

Using the wrong port like 8080 or 5601 which are for other services.

Elasticsearch listens on port 9200 by default, so the host must include this port.

4fill in blank

hard

Fill both blanks to configure Filebeat to read logs from /var/log and exclude .gz files.

Elasticsearch

filebeat.inputs:
- type: log
  paths:
    - [1]
  exclude_files: [[2]]

Drag options to blanks, or click blank then click option'

A"/var/log/*.log"

B"/var/log/*.gz"

C"/var/log/*.txt"

D"/var/log/*.json"

Attempts:

3 left

💡 Hint

Common Mistakes

Including .gz files instead of excluding them.

Filebeat reads log files matching /var/log/*.log and excludes compressed files *.gz.

5fill in blank

hard

Fill all three blanks to create a Metricbeat configuration that collects CPU metrics every 10 seconds and sends to Elasticsearch at localhost:9200.

Elasticsearch

metricbeat.modules:
- module: system
  metricsets: [[1]]
  period: [2]
output.elasticsearch:
  hosts: ["[3]"]

Drag options to blanks, or click blank then click option'

A"cpu"

B"10s"

Clocalhost:9200

D"memory"

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong metricsets like 'memory' instead of 'cpu'.

Setting period to wrong format or value.

Using wrong Elasticsearch host or port.

The cpu metricset collects CPU data, 10s sets the collection interval, and localhost:9200 is the Elasticsearch host.