Logstash as a service in linux

Elastic Stack Logstash
1

Hello,
Is it possible to run logstash as service in linux? i am finding it difficult, in windows its super easy and even can run multiple instances, but in linux i have no clue at all

2

How are you installing Logstash? RPM package? Debian package?

3

On AWS linux, RPM

4

Then I'm sure it's managed like any other service, i.e. with e.g. service logstash start. Configuration files go into /etc/logstash/conf.d and startup options are set via /etc/sysconfig/logstash.

1 Like
5

it stops very often, not sure where to check

6

just saw the log and i have this

WARN: org.elasticsearch.transport.netty: [logstash-0.0.0.0-3475-2010] exception caught on transport layer [[id: 0x88a4d1f1]], closing connection

Should we give http://elasticsearchurl:port in the logstash config file? or without http?

7

WARN: org.elasticsearch.transport.netty: [logstash-0.0.0.0-3475-2010] exception caught on transport layer [[id: 0x88a4d1f1]], closing connection

In the Logstash log? Which version of Logstash is this? What's your configuration?

Should we give http://elasticsearchurl:port in the logstash config file? or without http?

Either or, I believe.

8

Yes, version is logstash-2.2.4-1.noarch

9

And what does your Logstash configuration look like?

10

which file u are referrng here :grin:

11

The file(s) you put in /etc/logstash/conf.d or feed to Logstash on the command line.

12

input {
tcp {
port => 5504
type => 'metrix
codec => json {
charset => "UTF-8"
}
}
}

output {
if [type] == "metrix" {
elasticsearch {
host => "ip:9200"
index => "metrics-%{+YYYY.MM.dd}"
}
}
}

13

actually have them in 2 files one as input and another as output

14

Okay. Not sure what's going on.

15

:cry:

16

Fixed it, it should be hosts not host :relaxed: