I have the following logstash conf:
input {
http {
port => 8080
ssl => true
ssl_certificate => "/etc/logstash/keys/certificate.crt"
ssl_key => "/etc/logstash/keys/certificate.key"
ssl_verify_mode => "force_peer"
ssl_certificate_authorities => ["/etc/logstash/keys/certificate.crt"]
tags => ["web"]
}
}
output {
if "web" in [tags] {
elasticsearch {
hosts => "localhost:9200"
index => "jira-acd"
}
}
}
From the configuration you can know that I used JIRA to call this http input.
But I find that the logstash cannot receive the input. In the debug mode it has the following message:
[DEBUG] 2018-09-24 08:46:40.836 [Ruby-0-Thread-9: :1] pipeline - Pushing flush onto pipeline {:pipeline_id=>"main", :thread=>"#<Thread:0x6452423f sleep>"}
[DEBUG] 2018-09-24 08:46:41.369 [pool-2-thread-2] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2018-09-24 08:46:41.369 [pool-2-thread-2] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2018-09-24 08:46:42.756 [http-input-processor[T#2]] SslSimpleBuilder - Available ciphers:[ECDHE-ECDSA-AES128-GCM]
[DEBUG] 2018-09-24 08:46:42.756 [http-input-processor[T#2]] SslSimpleBuilder - Ciphers: [TLS_ECDHE_ECDSA_WITH_AES_256_G]
[DEBUG] 2018-09-24 08:46:42.756 [http-input-processor[T#2]] SslSimpleBuilder - Certificate Authorities: [/etc/logstash/keys/certificate.crt, /etc/logstash/keys/azeusconvene-ca.crt]
[DEBUG] 2018-09-24 08:46:42.756 [http-input-processor[T#2]] SslSimpleBuilder - Load certificates collection
[DEBUG] 2018-09-24 08:46:42.756 [http-input-processor[T#2]] SslSimpleBuilder - Loading certificates from file /etc/logstash/keys/certificate.crt
[DEBUG] 2018-09-24 08:46:42.764 [http-input-processor[T#2]] SslSimpleBuilder - Loading certificates from file /etc/logstash/keys/azeusconvene-ca.crt
[DEBUG] 2018-09-24 08:46:42.798 [http-input-processor[T#2]] ResourceLeakDetectorFactory - Loaded default ResourceLeakDetector: io.netty.util.ResourceLeakDetector@505d7d80
[DEBUG] 2018-09-24 08:46:42.802 [http-input-processor[T#2]] SslSimpleBuilder - TLS: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2018-09-24 08:46:42.840 [http-input-processor[T#2]] plain - config LogStash::Codecs::Plain/@id = "plain_976ebc8a-395d-4e8a-ad12-99137d73ba23"
[DEBUG] 2018-09-24 08:46:42.840 [http-input-processor[T#2]] plain - config LogStash::Codecs::Plain/@enable_metric = true
[DEBUG] 2018-09-24 08:46:42.840 [http-input-processor[T#2]] plain - config LogStash::Codecs::Plain/@charset = "UTF-8"
[DEBUG] 2018-09-24 08:46:42.851 [http-input-processor[T#2]] json - config LogStash::Codecs::JSON/@id = "json_d11cf586-4ccf-4e79-b8f8-9bb6ff2d2f16"
[DEBUG] 2018-09-24 08:46:42.851 [http-input-processor[T#2]] json - config LogStash::Codecs::JSON/@enable_metric = true
[DEBUG] 2018-09-24 08:46:42.851 [http-input-processor[T#2]] json - config LogStash::Codecs::JSON/@charset = "UTF-8"
[DEBUG] 2018-09-24 08:46:45.836 [Ruby-0-Thread-9: :1] pipeline - Pushing flush onto pipeline {:pipeline_id=>"main", :thread=>"#<Thread:0x6452423f sleep>"}
[DEBUG] 2018-09-24 08:46:46.375 [pool-2-thread-2] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2018-09-24 08:46:46.376 [pool-2-thread-2] jvm - collector name {:name=>"ConcurrentMarkSweep"}
Seems this is not normal as the succcessful messsage should be;
[DEBUG] 2018-09-24 06:54:40.697 [http-input-processor[T#2]] SslSimpleBuilder - Available ciphers:[ECDHE-ECDSA-AES128-GCM-SHA256]
[DEBUG] 2018-09-24 06:54:40.697 [http-input-processor[T#2]] SslSimpleBuilder - Ciphers: [TLS_ECDHE_ECDSA_WITH_AES_256_]
[DEBUG] 2018-09-24 06:54:40.697 [http-input-processor[T#2]] SslSimpleBuilder - Certificate Authorities: [/etc/logstash/keys/certificate.crt, /etc/logstash/keys/azeusconvene-ca.crt]
[DEBUG] 2018-09-24 06:54:40.697 [http-input-processor[T#2]] SslSimpleBuilder - Load certificates collection
[DEBUG] 2018-09-24 06:54:40.697 [http-input-processor[T#2]] SslSimpleBuilder - Loading certificates from file /etc/logstash/keys/certificate.crt
[DEBUG] 2018-09-24 06:54:40.699 [http-input-processor[T#2]] SslSimpleBuilder - Loading certificates from file /etc/logstash/keys/azeusconvene-ca.crt
[DEBUG] 2018-09-24 06:54:40.733 [http-input-processor[T#2]] ResourceLeakDetectorFactory - Loaded default ResourceLeakDetector: io.netty.util.ResourceLeakDetector@506d3780
[DEBUG] 2018-09-24 06:54:40.739 [http-input-processor[T#2]] SslSimpleBuilder - TLS: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2018-09-24 06:54:40.776 [http-input-processor[T#2]] plain - config LogStash::Codecs::Plain/@id = "plain_1a9e7a46-22d3-4cf9-a7da-fbf7af77afe9"
[DEBUG] 2018-09-24 06:54:40.777 [http-input-processor[T#2]] plain - config LogStash::Codecs::Plain/@enable_metric = true
[DEBUG] 2018-09-24 06:54:40.777 [http-input-processor[T#2]] plain - config LogStash::Codecs::Plain/@charset = "UTF-8"
[DEBUG] 2018-09-24 06:54:40.788 [http-input-processor[T#2]] json - config LogStash::Codecs::JSON/@id = "json_7a16a65d-b3d3-44f1-aae1-283fb0a35159"
[DEBUG] 2018-09-24 06:54:40.788 [http-input-processor[T#2]] json - config LogStash::Codecs::JSON/@enable_metric = true
[DEBUG] 2018-09-24 06:54:40.788 [http-input-processor[T#2]] json - config LogStash::Codecs::JSON/@charset = "UTF-8"
[DEBUG] 2018-09-24 06:54:40.967 [http-input-processor[T#2]] SslHandler - [id: 0xbff720dd, L:/:8080 - R:/:55096] HANDSHAKEN: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2018-09-24 06:54:41.230 [http-input-handler-executor[T#1]] decorators - inputs/LogStash::Inputs::Http: adding tag {"tag"=>"web"}
Now I am helpless as the debug log cannot return error message and just skipped some logging...Can anyone help to advice these logging or other way to collect more logging please? Thank you very much.