my /var/log/logstash/logstash-plain.log is filled with this message:
Plugin: <LogStash::Inputs::Beats port=>5044, id=>"7d2df07b204d5d4619e5b8cc3aa09bbac2cbbe56-4", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_91b654e7-60d7-4faa-ad66-0297f4597183", enable_metric=>true, charset=>"UTF-8">, host=>"0.0.0.0", ssl=>false, ssl_verify_mode=>"none", include_codec_tag=>true, ssl_handshake_timeout=>10000, congestion_threshold=>5, target_field_for_codec=>"message", tls_min_version=>1, tls_max_version=>1.2, cipher_suites=>["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"], client_inactivity_timeout=>60>
Error: event executor terminated
However, it seems like things are working when I tail -f /var/log/messages, I see logs being sent from my beats clients:
{
Mar 6 12:18:16 s-ut-logstash-1 logstash: "server" => "443",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "referer" => "\"https://broadcast.storagecraft.com/videos/\"",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "auth" => "-",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "ident" => "-",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "bytes_received" => "993",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "source" => "/var/log/httpd/broadcast.storagecraft.com_log",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "request_method" => "GET",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "type" => "log",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "uri_path" => "/videos/livestreams/json/",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "@version" => "1",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "beat" => {
Mar 6 12:18:16 s-ut-logstash-1 logstash: "hostname" => "redacted",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "name" => "redacted",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "version" => "5.2.0"
Mar 6 12:18:16 s-ut-logstash-1 logstash: },
Mar 6 12:18:16 s-ut-logstash-1 logstash: "host" => "redacted",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "client_ip" => "redacted",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "user_agent" => "\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\"",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "geoip" => {},
Mar 6 12:18:16 s-ut-logstash-1 logstash: "offset" => 75032,
Mar 6 12:18:16 s-ut-logstash-1 logstash: "time_stamp" => "06/Mar/2017:12:18:01 -0700",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "input_type" => "log",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "http_version" => "1.1",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "message" => "redacted - - [06/Mar/2017:12:18:01 -0700] \"broadcast.storagecraft.com\" 443 \"GET /videos/livestreams/json/ HTTP/1.1\" 200 \"https://broadcast.storagecraft.com/videos/\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36\" 993 511",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "bytes_sent" => "511",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "tags" => [
Mar 6 12:18:16 s-ut-logstash-1 logstash: [0] "beats_input_codec_plain_applied",
Mar 6 12:18:16 s-ut-logstash-1 logstash: [1] "_grokparsefailure",
Mar 6 12:18:16 s-ut-logstash-1 logstash: [2] "_geoip_lookup_failure"
Mar 6 12:18:16 s-ut-logstash-1 logstash: ],
Mar 6 12:18:16 s-ut-logstash-1 logstash: "@timestamp" => 2017-03-06T19:18:11.750Z,
Mar 6 12:18:16 s-ut-logstash-1 logstash: "response" => "200",
Mar 6 12:18:16 s-ut-logstash-1 logstash: "web_site" => "\"broadcast.storagecraft.com\""
Mar 6 12:18:16 s-ut-logstash-1 logstash: }
Any ideas how I can fix this error?
logstash 5.2.0 on CentOS 7