2 Replies Latest reply on Feb 24, 2019 11:49 PM by Aftab Parvaiz

    Tableau logs to Filebeat

    Aftab Parvaiz

      Can anyone here share their filbeat.yml ?

      I want to see which logs and what information people are extracting from Tableau.

      For the moment, mine looks like the code below. It is extracting everything and its hard to make sense.

      #=========================== Filebeat prospectors =============================
      # Each - is a prospector. Most options can be set at the prospector level, so
      # you can use different prospectors for various configurations.
      # Below are the prospector specific configurations.
      - input_type: log
        # Paths that should be crawled and fetched. Glob based paths.
          - /var/log/*.log
          - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\vizqlserver\vizqlserver_node*.*
          - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\vizportal\vizportal_node*.*
          - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\dataserver\dataserver_node*.*
          - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\backgrounder\backgrounder_node*.*
      #----------------------------- Logstash output --------------------------------
        enabled: true
        hosts: ["server_1", "server_2"]
        worker: 1
        loadbalance: true  
        ssl.enabled: false
        ssl.verification_mode: none
        #----------------------------- File output --------------------------------
       enabled: false
       path: ${path.home}\output
       filename: filebeat.output
       rotate_every_kb: 10000
       number_of_files: 10
      #================================ Logging ======================================
      logging.level: debug
      logging.selectors: ["*"]
      logging.to_files: false
        path: ${path.logs}
        name: filebeat
        rotateeverybytes: 10485760 # = 10MB
        keepfiles: 10
        • 1. Re: Tableau logs to Filebeat

          Hello Aftab,


          I do not have any information on the use of Filebeat with Tableau. I would be happy to provide some information or tips that can be applied to helping you achieve the desired result. What is the purpose of the filebeat program? Log analysis? Cleaning of Tableau Server logs?


          Please give some additional information on the desired use of filebeat with Tableau.



          Byrne, Patrick

          Community Manager

          Tableau Software

          • 2. Re: Tableau logs to Filebeat
            Aftab Parvaiz

            Dear Patrick,

            Filebeat is a client that sends log-files from a webserver to Elasticsearch (a search engine) which are then available in Kibana (see the image below).



            I have read about LogShark but we use Elastic Search and KIBANA in my organization.

            I am wondering if there are any particular log files other than the ones below that can give me insight about user actions like download of an extract/data source/workbook, using custom sql etc


            1. - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\vizqlserver\vizqlserver_node*.* 
            2.     - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\vizportal\vizportal_node*.* 
            3.     - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\dataserver\dataserver_node*.* 
            4.     - C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\backgrounder\backgrounder_node*.