Hi Guys,
Thanks..!!! in advance
After replacing "localhost" with "192.168.0.100:9200" in the output of logstash configuration I am getting below errors in /var/log/logstash/logstash-plain.log :
[2017-01-23T13:21:55,198][ERROR][org.logstash.beats.BeatsHandler] Exception: org.logstash.beats.BeatsParser$InvalidFrameProtocolException: Invalid Frame Type, received: 3
[2017-01-23T13:21:55,198][ERROR][org.logstash.beats.BeatsHandler] Exception: org.logstash.beats.BeatsParser$InvalidFrameProtocolException: Invalid Frame Type, received: 1
I am using ELK 5.1.1-1.
My configurations:
input {
beats {
port => 5050
}
}
filter {
{ some grok filter }
}
output {
if "_grokparsefailure" in [tags] {
stdout { codec => rubydebug }
}
elasticsearch { hosts => "192.168.0.100:9200" index => "logstash-%{+YYYY.MM.dd}" }
}
Please guide.