I am not able to see any output on my logstash and kibana.But pipeline is created successfully

Elastic Stack Logstash
1

input {
file {
path => "C:\Users\Micronet1\Desktop\logstash-acess\Main.log"
codec => multiline {
pattern => "^%{TIMESTAMP_ISO8601}"
negate => true
what => previous
}
}
}
filter {

if [path] == "Main" {

grok {      
    match => { "message" => "%{DATA:time} %{LOGLEVEL:level} \[%{DATA:class}\] %{JAVACLASS:class}%{DATA:method}:%{GREEDYDATA:syslog_message}"}
}
}

}

output {

elasticsearch { 
    hosts => [ "localhost:9200" ]
    index => "logstash-*"
   
}
 
stdout { codec => rubydebug }

}

2

Baby steps. First get Logstash to read the input file without a multiline filter. Comment out your elasticsearch output and keep only your stdout output. Then you can start adding more features.

Logstash is probably tailing the input file. Read more about the file input's start_position and sincedb_path options.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.