FileBeat is not sending logfile to logstash

[nitin.jangid (nitin)]

Hi there,

I am trying to ingest log data into logstash using filebeat.
For that I have made filebeat as service in my system localhost and configured with path of log file and logstash host in filebeat.yml.

filebeat.yml below:

I have been running filebeat service in my system.

Here is logstash config file for filebeat below:

Here is the logstash console:

In lostash config file, as I am printing log data in logstash console and sending data in elastic search, both output task is not working, and i dont see any error in logstash console.
Please help, thanks in advance.

[Tek_Chand]

@nitin.jangid,

Are you running filebeat and logstash over same server? Because you have set localhost:5044 in your output.logstash.

Also please run the below command from your filebeat system if you are running logstash over same system:

telnet 127.0.0.1 5044

Also please check filebeat service is running or not.
Please confirm.

Thanks.

[nitin.jangid (nitin)]

@Tek_Chand,
Yes I am running filebeat and logstash over same server.
I ran command "telnet 127.0.0.1 5044" in cmd. I am getting blank screen in cmd.

As you can see filebeat is running.

Thanks

[Tek_Chand]

@nitin.jangid,

Are you getting logs in your tomcatlog.log file?

Thanks.

[nitin.jangid (nitin)]

@Tek_Chand,
Yes I have log records in tomcatLog.log file. these are the records in tomcatLog file.

"122.164.121.231 - - [23/Nov/2015:07:19:54 -0500] "GET /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "http://localhost/octoviz-auth/public/octoviz/admin/admin.html" "Mozilla/5.1 (X11; Ubuntu; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0"
"122.164.121.232 - - [24/Nov/2015:07:19:54 -0500] "POST /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "http://localhost/octoviz-auth/public/octoviz/admin/admin.html" "Mozilla/5.2 (X11; Windows; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0"
"122.164.121.233 - - [25/Nov/2015:07:19:54 -0500] "PUT /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "http://localhost/octoviz-auth/public/octoviz/admin/admin.html" "Mozilla/5.3 (X11; Ubuntu; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0"
"122.164.121.234 - - [26/Nov/2015:07:19:54 -0500] "DELETE /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "http://localhost/octoviz-auth/public/octoviz/admin/admin.html" "Mozilla/5.4 (X11; Windows; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0"
"122.164.121.235 - - [27/Nov/2015:07:19:54 -0500] "FATCH /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "http://localhost/octoviz-auth/public/octoviz/admin/admin.html" "Mozilla/5.5 (X11; Ubuntu; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0"
"122.164.121.236 - - [28/Nov/2015:07:19:54 -0500] "GET /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "http://localhost/octoviz-auth/public/octoviz/admin/admin.html" "Mozilla/5.6 (X11; Windows; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0"