Logstash configuring error in windows

Elastic Stack Logstash
1

Hi, I am using elk stack to fetch logs from client machine. i have done using these version elasticsearch- 6.5.3 logstash- 6.5.3 after 6 months Today for testing i just started watching logs running elasticseach and logstash. elasticsearch get started running when i configure logstash it shows this error:

F:\ELK(.exe file)\logstash-6.5.3\bin>logstash -f demo-winlog-pipeline.conf
Error: Could not find or load main class file)\logstash-6.5.3\logstash-core\lib\jars\animal-sniffer-annotations-1.14.jar;F:\ELK(.exe

What went wrong? anyone hep me fast

2

based on this, i will first check whether said jar exists. it will help if you post your logstash config.

3

Before 6 months using this same bat file i configured it get works fine but today it shows error

input {
  beats {
    port => 5044
  }
}

filter {
  if [system][process] {
    if [system][process][cmdline] {
      grok {
        match => {
          "[system][process][cmdline]" => "^%{PATH:[system][process][cmdline_path]}"
        }
       
      }
    }
  }
}

output {
  elasticsearch {
    hosts => "localhost:9200"
    manage_template => false
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
  }
}
4

is this file exists? how do you rub logstash? you mentioned bat script, what does the script look like?

5

cannot unserstand? where i need to check jar is available or not?

6

this error indicated path issue. if you run it from bat script, try wrapping F:\ELK(.exe file)\logstash-6.5.3\bin>logstash inside a double quote. seems like there’s a space in your directory path

7

image
image1366×768 84.3 KB

Now it started successfully because I changed the logstash directory

what is the reason it doesnot running on previous directory? any specific reason

8

There is no space, I just use command prompt to navigate to that directory

9

the above line was in your previous error message. there is obviously space between .exe and file.

by navigating to bin directory and launch the logstash command, you eliminate the need to specify path.

10

okay thanks

11

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.