Log files not forwarded to Elasticsearch

[ArjunSISA]

Hi everyone,

i have configured winlogbeat to forward windows logs to logstash and successfully receiving logs in logstash(which i can see in command prompt), but i'm not getting the logs in elasticsearch.

can anyone guide me ?

please find my logstash config:

input {

beats {
port => 5044
#ssl_certificate => "C:\siem\logfw.crt"
#ssl_key => "C:\siem\logfw.key"
}

{

output {
stdout { codec => rubydebug }

elasticsearch {

hosts => ["localhost:7778"]
index => "logstash-client1-%{+YYYY.MM.dd}"

}
}

[renevdm]

Seems to be the same issue as this:

Fresh logstash 5.2 install gives log4j warnings and no logging from plugins

I just downloaded the new logstash version (5.2.1), and after starting it I noticed a warning message saying that log4j needs to be initialized properly. I also noticed that plugins like kafka, beats, etc, were not emitting any output log... I used this very simple command to reproduce the problem on a Windows machine: $ bin\logstash -e "input{beats{port=>5044}} output{stdout{}}" Could not find log4j2 configuration at path /Downloads/logstash-5.2.1/config/log4j2.properties. Using default…

[warkolm]

Is there anything in stdout?

[system]

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.