Kibana doesn't show logstash data

Hi,

I'm using the ELK stack to parse our log files.
When I run it in the foreground it works, but when I run it as a service I don't see any information being displayed in Kibana.

I use: systemctl start Logstash
When I check the status this is displayed:
[root@web07 system]# systemctl status logstash
● logstash.service - logstash
Loaded: loaded (/etc/systemd/system/logstash.service; disabled; vendor preset: disabled)
Active: active (running) since Fri 2019-12-06 10:47:17 CET; 41s ago
Main PID: 1635596 (java)
Memory: 840.8M
CGroup: /system.slice/logstash.service
└─1635596 /bin/java -Xms1g -Xmx1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djruby.compile.invokedynamic=true -Djruby.j...

Dec 06 10:47:55 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:55,537][INFO ][logstash.javapipeline ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>16, "pipeline.batch.size"=>125, "pipeline.batch.de...
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,419][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"/var/lib/logsta...s/access_log"]}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,501][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"/var/lib/logsta...gs/error_log"]}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,523][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"/var/lib/logsta...cess_ssl_log"]}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,561][INFO ][logstash.javapipeline ][main] Pipeline started {"pipeline.id"=>"main"}
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,733][INFO ][filewatch.observingtail ][main] START, creating Discoverer, Watch with file and sincedb collections
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,733][INFO ][filewatch.observingtail ][main] START, creating Discoverer, Watch with file and sincedb collections
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,740][INFO ][filewatch.observingtail ][main] START, creating Discoverer, Watch with file and sincedb collections
Dec 06 10:47:56 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:56,921][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
Dec 06 10:47:57 web07.shoptrader.com logstash[1635596]: [2019-12-06T10:47:57,617][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9602}

Everything seems to be working properly, but it still doesn't display any data.

Regards,
Jeffrey

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.