input {
file {
path => "H:\logstash\zipped_folders\logstash-2.3.1\bin\first-pipeline-data"
start_position => beginning #1
#ignore_older => 0
}
}
filter {
grok { # Grok looks for patterns in incoming log data
match => {"message" => "%{COMBINEDAPACHELOG}"}
}
geoip { # geoip plugin looks up IP addr, derive geo location and adds to logs
source => "clientip"
}
}
output {
elasticsearch{}
stdout{}
}
#1 default behavious of file input plugin is to monitor a file for new info
#2 default behaviour of file input plugin is to ignore files whose last modification greater than 86400s
path => H:\logstash\zipped_folders\logstash-2.3.1\bin\first-pipeline.conf
this is the configuration file I used for logstash. when I run the command 'logstash -f firstpipeline.conf' I get the error connection refused: connect {:class=>"Manticore::SocketException", :level:error}