Fail to install Logstash-Forwarder on ubuntu 1804

Elastic Stack Logstash
1

I have successfully installed logstash-forwarder on ubuntu 1404, and 1604.
Now the same method failed on ubuntu 1804.

This is the steps I do:

  1. echo 'deb http://packages.elasticsearch.org/logstashforwarder/debian stable main' | sudo tee /etc/apt/sources.list.d/logstashforwarder.list
  2. wget -O - http://packages.elasticsearch.org/GPG-KEY-elasticsearch | sudo apt-key add -
  3. sudo apt-get update
  4. sudo service logstash-forwarder restart

On step 3, I got the following error:

Get:11 http://packages.elasticsearch.org/logstashforwarder/debian stable Release.gpg [490 B]
Ign:11 http://packages.elasticsearch.org/logstashforwarder/debian stable Release.gpg
Reading package lists... Done
W: GPG error: http://packages.elasticsearch.org/logstashforwarder/debian stable Release: The following signatures were invalid: 46095ACC8548582C1A2699A9D27D666CD88E42B4
E: The repository 'http://packages.elasticsearch.org/logstashforwarder/debian stable Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Could someone help? Using the same method, how can I solve this issue on ubuntu 1804.
Thanks a thousand.....

2

Logstash forwarder has long since been deprecated. Use filebeat instead. Filebeat was created from the original Logstash forwarder code, and has been greatly improved upon since then, and has dedicated maintainers.

3

We have existing customers using logstash. We need to support this.
Is there anyway to make logstash-forwarder working in ubuntu 1804?
e.g. properly sign http://packages.elasticsearch.org/logstashforwarder/debian stable Release?

4

filebeat can send to Logstash, which has the beats input plugin to receive that data.

There is no chance the Logstash forwarder packages will be touched. You will have to upgrade to using filebeat or find another way to ship your logs.

2 Likes
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.