Hi,
I use two different machine: one with filebeat and other with logstash. Elasticsearch is on web service.
I configure filebeat.yml like this:
filebeat.prospectors:
-input_type: log
path:
- /mnt/analisilog/www.access_log
output.logstash:
hosts: ["52.20.987.249:5044"]
the hosts is the IP of logstash machine.
logstash.conf:
input {
beats {
port => 5044 }
}
output {
stdout {
codec => dots {}
}
elasticsearch {
hosts => ["https://search-analisilog-
kmymdimynogbrfy.eu-west-1.es.amazonaws.com"]
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}
i follow the guide to upload manually filebeat.template.json.
Now for comunicating of two machines i have to start logstash and filebeat but when i start logstash send me error:
[2017-07-05T16:00:41,147][ERROR][logstash.outputs.elasticsearch] Failed to install template. {:message=>"Got response code '403' contacting Elasticsearch at URL...
On Logstash machine i've installed logstash-input-beats on logstash directory.
My logstash doesn't start.
Thanks for replay