I've recently followed a couple of guides to get a ELK stack up and working however I'm having some issues transporting my logs via filebeat to logstash.
Errors:
2016-11-01T18:11:19Z ERR Failed to publish events caused by: EOF
2016-11-01T18:11:19Z INFO Error publishing events (retrying): EOF
Thanks for that, I've now figured it out and got it working. Just need to add the SSL now.
One question, in the tutorial i was following a separate file was created in the /etc/logstash/conf.d/ folder for the syslog filter, do I need to use a separate file or does this go into the logstash.conf file now?
All of the config files in the conf.d directory are concatenated in lexicographical order and then parsed as a single config file. So you can split them up or just have one large file.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.