Hi,
I'm using the ELK stack to parse our log files.
When I run it in the foreground it works, but when I run it as a service I don't see any information being displayed in Kibana.
I use: systemctl start Logstash
When I check the status this is displayed:
[root@web07 system]# systemctl status logstash
â— logstash.service - logstash
Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendor preset: disabled)
Active: active (running) since Fri 2019-12-06 10:47:17 CET; 41s ago
Main PID: 1635596 (java)
Memory: 840.8M
CGroup: /system.slice/logstash.service
└─1635596 /bin/java -Xms1g -Xmx1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djruby.compile.invokedynamic=true -Djruby.j...
Dec 06 10:47:55 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:55,537][INFO ][logstash.javapipeline ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>16, "pipeline.batch.size"=>125, "pipeline.batch.de...
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,419][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"/var/lib/logsta...s/access_log"]}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,501][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"/var/lib/logsta...gs/error_log"]}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,523][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"/var/lib/logsta...cess_ssl_log"]}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,561][INFO ][logstash.javapipeline ][main] Pipeline started {"pipeline.id"=>"main"}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,733][INFO ][filewatch.observingtail ][main] START, creating Discoverer, Watch with file and sincedb collections
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,733][INFO ][filewatch.observingtail ][main] START, creating Discoverer, Watch with file and sincedb collections
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,740][INFO ][filewatch.observingtail ][main] START, creating Discoverer, Watch with file and sincedb collections
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,921][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
Dec 06 10:47:57 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:57,617][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9602}
Everything seems to be working properly, but it still doesn't display any data.
Regards,
Jeffrey