Hi guys. I have a config that works if I run logstash on the config individually like this:
$ /opt/logstash/bin/logstash -f someconfig.conf
Or if I run it as root for that matter, but if I run the logstash as a service on Ubuntu and I place my config in the directory where the other configs are located which on my box is
/etc/logstash/conf.d/
then the config just shows grokparsefailure and does not contain much or any data.
If I run this:
$ /opt/logstash/bin/logstash -f insert-config-name-here.conf --configtest
on each config individually then everything seems fine, I get the output:
Configuration OK
after running the command on each config. If I run this: (Then I get an error):
# service logstash configtest
The part of the config that I've changed since the last time when everything worked fine is this part(Perhaps it helps if I post this here too):
Take note I removed some parts for my own privacy reasons. Thanks for your time.
output {
elasticsearch {
...
}
if [type] == "WindowsLog" {
elasticsearch {
hosts => "localhost"
...
}
}
}