How to check whether logsash is parsing data from a filebeat

Elastic Stack Logstash
1

Hi,

Is there a way to know whether the log stash is parsing data from a particular filebeat or not. I am sending the data from file beat to logstash and there were configuration errors in logstash but i couldn't see the index getting created in elasticsearch. In order troubleshoot, i am trying to understand whether the logstash is parsing data or not .

Thanks

2

You could use the stdout filter in Logstash to see if events are getting parsed. If there are config errors, Logstash will not index data to Elasticsearch.

You could refer to the Logstash logs for any errors.

3

Thank you for the reply ... but when I configure the filebeat with only one log file, I could see that data is getting indexed in elastic search.

4

Could you please post your logstash and filebeat config?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.