Logstash file input not reading files when run as service

Elastic Stack Logstash
1

This one is a bit odd. If I run logstash as any user from the command line, it will index the files, changes, etc., but when I run it as a service via the repo install on Ubuntu it just doesn't do anything with regard to the config that works perfectly fine when run manually.

I increased the logging to debug and there is nothing obvious.

If there anything I can post here the might help?

1 Like
2

Probably insufficient permissions to read the log files. Reduce logging verbosity from debug to verbose to reduce the noise and you'll probably see some clues.

1 Like
3

I finally gave up, I gave it all the permissions to no avail. I switched over to Filebeat which is working, but I still don't like poking a hole into the network.