Logstash Conf Error For Tweet

Elastic Stack Logstash
#1

Hi,
I'm trying to do this . But when i wrote all configurations and restart logstash. This error appears "Configuration error. Not restarting. Re-run with configtest parameter for details" .

I tryied to find out this error step by step. Then i figure it out it's about my output configuration.

I'm using digitalocean droplet with elk logging stack so it all set up already. I'm just trying to implement twitter configuration. I need help.
this is my default output conf
output { elasticsearch { hosts => ["localhost:9200"] sniffing => true manage_template => false index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}" document_type => "%{[@metadata][type]}" } }

#2

Does it error if you run LS and refer to the conf file manually?

#3

I don't know how to do it manually. Can you show me?

#4

This error appears "Configuration error. Not restarting. Re-run with configtest parameter for details" .

Run /path/to/logstash --configtest -f /path/to/configfile to get details.

#5

I get command not found. I'm using ubuntu. I think its about syntax. Could you show me with more detail.

#6

It sounds like you didn't replace /path/to with the actual path to the Logstash binary (probably /opt/logstash/bin) and the path to your configuration file (probably /etc/logstash/conf.d).

#7

root@client:/etc/logstash/conf.d# --configtest -f 02-beats-input.conf it's like this. I think i did wrong

#8

Your command should have the form /path/to/logstash --configtest -f /path/to/configfile, with /path/to replaced by the actual paths to the Logstash binary and your configuration file.

#9

root@client:/opt/logstash/bin# --configtest -f /etc/logstash/conf.d/02-beats-input.conf
it's not working. Where did i wrong?

#10

The command you're running is --configtest -f /etc/logstash/conf.d/02-beats-input.conf. You're not including the Logstash command. Over and out.

#11

I get this
root@client:/opt/logstash/bin# /opt/logstash/bin/logstash --configtest -f /etc/logstash/conf.d/30-elasticsearch-output.conf Connection refused {:class=>"Manticore::SocketException", :level=>:error} Connection refused {:class=>"Manticore::SocketException", :level=>:error} Configuration OK

this is my output conf
output { stdout { codec => dots } elasticsearch { hosts => "localhost" index => "twitter" document_type => "tweet" template => "twitter_template.json" template_name => "twitter" } }

#12

Ok, so take a look at https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html and make some corrections :slight_smile:

#13

I edit my last post

#14

Is ES running? Can you curl localhost:9200 and get a response?

#15

root@client:~# curl localhost:9200
curl: (7) Failed to connect to localhost port 9200: Connection refused

#16

Ok, so ES isn't running on localhost.
Is that where you installed it? Is the service running?

You need to do a bit of investigation on your own here, we don't have access to your systems :slight_smile:

#17

I'm working on digitalocean droplet. I don't know where to look. But thanks anyway. You said it i have to figure it out some how

#18

Have you even installed Elasticsearch?

#19

yes it has been installed. before the twitter configuration. all system is working fine.

#20

If ES is not responding to localhost:9200 then something is not right there.