How to make the loastash.conf effective

Hi,all
i configed the filebeat to send docker log to the logstash,And it does works, i can see the docker log on the logstash container sent by filebeat. then i config the logstash config file "logstash.conf" to send the docker log to the elasticsearch like below:

input {
  beats {
    port => 5044
  }
}

output {
  elasticsearch {
    hosts => ["http://192.168.1.103:9200"]
    manage_template => false
    index => "docker_log" 
    #document_type => "%{[@metadata][type]}"
    #user => "elastic"
    #password => "changeme"
  }
}

but it does not work, i can't find the index in the elasticsearch. i just thinking whether the conf file is not work or something? what's the problem?

What does your Logstash log show? (As in, the logging that Logstash itself does.) Maybe it encouters some kind of problem connecting to Elasticsearch or writing to the index.

https://www.elastic.co/guide/en/logstash/6.6/logging.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.