Configure the output for {{ech}} [configure-cloud-id]

Filebeat comes with two settings that simplify the output configuration when used together with {{ech}}. When defined, these setting overwrite settings from other parts in the configuration.

Example:

cloud.id: "staging:dXMtZWFzdC0xLmF3cy5mb3VuZC5pbyRjZWM2ZjI2MWE3NGJmMjRjZTMzYmI4ODExYjg0Mjk0ZiRjNmMyY2E2ZDA0MjI0OWFmMGNjN2Q3YTllOTYyNTc0Mw=="
cloud.auth: "elastic:YOUR_PASSWORD"

These settings can be also specified at the command line, like this:

filebeat -e -E cloud.id="<cloud-id>" -E cloud.auth="<cloud.auth>"

cloud.id [_cloud_id]

The Cloud ID, which can be found in the {{ecloud}} console, is used by Filebeat to resolve the {{es}} and {{kib}} URLs. This setting overwrites the output.elasticsearch.hosts and setup.kibana.host settings. For more on locating and configuring the Cloud ID, see Find your Cloud ID.

cloud.auth [_cloud_auth]

::::{important} cloud.auth should not be confused with API keys generated in {{ecloud}} stack management. Although these values look similar, they are unrelated. ::::

When specified, the cloud.auth overwrites the output.elasticsearch.username and output.elasticsearch.password settings. Because the Kibana settings inherit the username and password from the {{es}} output, this can also be used to set the setup.kibana.username and setup.kibana.password options.