Flow of packetbeat through logstash

[s23deepak (Deepak Swaminathan)]

I need help in clarifying the flow of packets through the following files:

i) packetbeat.yml
ii) logstash.yml
iii) logstash configuration file ( logstash.conf )
iv) pipelines.yml

Could someone tell in which order these files have to be linked?

Thank you in advance...

[warkolm (Mark Walkom)]

To be clear, are you sending the data to Logstash? Are you using pipelines?

[s23deepak (Deepak Swaminathan)]

Hi warkolm,

Yes, i am trying to send data from port 5044 to logstash( which in turn is listening at default port 5044).
I have ran the following command:

/usr/share/logstash/bin/logstash -e 'input { beats { port => 5044 } } output { elasticsearch { hosts => localhost } }' --path.settings /etc/logstash

Because of the option -e pipelines .yml is being ignored, but while running the above command pipelines are automatically created.

[2019-06-17T11:13:24,466][INFO ][logstash.pipeline ] Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thread:0x1285ec73 run>"}