Hi
After installing x-pack, i have the followinf error in my logstash
[2018-09-05T09:14:40,717][ERROR][logstash.inputs.metrics ] Failed to create monitoring event {:message=>"For path: events. Map keys: [:pipelines, :reloads]", :error=>"LogStash::Instrument::MetricStore::MetricNotFound"}
Logstash.yml
xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.username: logstash_system
xpack.monitoring.elasticsearch.password: elastic
xpack.monitoring.elasticsearch.url: ["http://localhost:9200"]
xpack.management.enabled: true
xpack.management.pipeline.id: ["main","syslog"]
xpack.management.elasticsearch.username: elastic
xpack.management.elasticsearch.password: elastic
xpack.management.elasticsearch.url: ["http://localhost:9200"]
pipelines.yml
- pipeline.id: main
path.config: "/etc/logstash/conf.d/*.conf"
elasticsearch.yml
xpack.security.enabled: true
logstash configuration - syslog.conf -- /etc/logstash/conf.d/syslog.conf
input {
syslog{
port => "514"
host => "XXX.XX.XXX.XX"
}
}
filter
{
grok {
match => { "message" =>"%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" }
pattern_definitions => { "GREEDYMULTILINE" => "(.|\n)*" }
remove_field => "message"
}
date {
match => [ "syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
output {
elasticsearch
{ hosts => ["localhost:9200"]},
user => elastic
password => elastic
stdout { codec => rubydebug }
}
I have tried with all other similar post, still no luck