Logstash file input not processing (windows)

Elastic Stack Logstash
1

I am trying to process an apache log file to logstash and file is not getting process. My config file here:

input {
	file {
		path => "C:\Users\alejandro.alvarez\Downloads\elasticsearch_kibana\data\logs\apache_access.logs"
		start_position => "beginning"		
	#	sincedb_path => "NUL"
    }
	http {
	
	}
}
output {
	stdout {
		codec => rubydebug
	}
}

image
image1060×41 1.92 KB

Pipelines running {:count=>1,... but I dont see anything
Also, the .sincedb_2ea91ca3xxxxxx do not log anything.
Thanks

2

Do not use backslash in the path option of a file input, it is used as an escape. Use /

3

I have already tried with / but still the same result. As per my config file I have as input http, so I make a call through Postman and the call has been received (I added an output to file and I can see it there)

input {
	file {
		path => "C:/Users/alejandro.alvarez/Downloads/elasticsearch_kibana/data/logs/apache_access.logs"
		start_position => "beginning"		
	#	sincedb_path => "NUL"
    }
	http {
	
	}
}
output {
	stdout {
		codec => rubydebug
	}
	file {
		path => "C:/Users/alejandro.alvarez/Downloads/elasticsearch_kibana/logstash-7.14.0-windows-x86_64/logstash-7.14.0/logstest.txt"
	}
}```

Any help would be highly appreciated
4

Perhaps share the logstash startup logs

5

Setting to info mode

image
image1904×577 80.1 KB

I see the line [2021-08-18T14:17:38,101][INFO ][logstash.inputs.file ][main] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"C:/Users/alejandro.alvarez/Downloads/elasticsearch_kibana/logstash-7.14.0-windows-x86_64/logstash-7.14.0/data/plugins/inputs/file/.sincedb_1c917a28944f3fa59552afdb242255f6", :path=>[""C:/Users/alejandro.alvarez/Downloads/elasticsearch_kibana/data/logs/apache_access.logs"]} but no processing

6

found the issue file is .log and not .logs (kill me)
Thanks for your help

1 Like
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.