Logstash is being run using systemd. I have tried adding:
StandardError=/ebs/logs/some_error.log
in logstash.service but it doesn't work.
Also added this in pipelines.yml
output {
if [level] == "WARN" {
file {
path => "/ebs/logs/logstash/error.log"
codec => line { format => "%{message}"}
}
}
}
Any idea how can I separate the error logs of running Logstash service?