我最近安装了filebeat，我想编辑yml文件以指定此输入：
filebeat.prospectors:
- input_type: log
paths:
- /path/*.xml
# scan_frequency: 60s
document_type: message
multiline.pattern: '^<measInfo'
multiline.negate: true
multiline.match: after
我应该编辑文件filebeat.yml还是filebeat.yml.rpmnew？
当我编辑filebeat.yml时，出现此消息错误：
filebeat.service - filebeat
Loaded: loaded (/usr/lib/systemd/system/filebeat.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Thu 2018-07-19 11:35:40 CEST; 2s ago
Docs: https://www.elastic.co/guide/en/beats/filebeat/current/index.html
Process: 4695 ExecStart=/usr/share/filebeat/bin/filebeat -c /etc/filebeat/filebeat.yml -path.home /usr/share/filebeat -path.config /etc/filebeat -path.data /var/lib/filebeat -path.logs /var/log/filebeat (code=exited, status=1/FAILURE)
Main PID: 4695 (code=exited, status=1/FAILURE)