Flow of packetbeat through logstash

I need help in clarifying the flow of packets through the following files:

i) packetbeat.yml
ii) logstash.yml
iii) logstash configuration file ( logstash.conf )
iv) pipelines.yml

Could someone tell in which order these files have to be linked?

Thank you in advance...

To be clear, are you sending the data to Logstash? Are you using pipelines?

Hi warkolm,

Yes, i am trying to send data from port 5044 to logstash( which in turn is listening at default port 5044).
I have ran the following command:

/usr/share/logstash/bin/logstash -e 'input { beats { port => 5044 } } output { elasticsearch { hosts => localhost } }' --path.settings /etc/logstash

Because of the option -e pipelines .yml is being ignored, but while running the above command pipelines are automatically created.

[2019-06-17T11:13:24,466][INFO ][logstash.pipeline ] Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thread:0x1285ec73 run>"}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.