Logstash-forwarder working

Elastic Stack Logstash
1

Hi,

I have just started using Logstash-forwarder , I have created key and crt and then want to check whether is is fine or not,

input {

lumberjack {
port => 9300
ssl_certificate => "/elkt/software/bkup/logstash-1.5.4/bin/server.crt"
ssl_key => "/elkt/software/bkup/logstash-1.5.4/bin/server.key"
type => "lumberjack"
}
}

filter{}

output {
stdout { codec => rubydebug }
}

When I am trying to get the info from es port , it is showing that port is already in use , and if I am specifying random port it is just showing logstash started .
Is there any way how to check whether it is working or not ?

Thanks

2

How about connecting logstash-forwarder (or Logstash with a lumberjack output) to the Logstash instance above and see if messages are being received? That's your end goal anyway, right?

3

yes.

so I tried getting logs from logstash-forwarder ,
So I have created key, certificate (following this doc link )

But I am getting an error that -

2015/10/07 06:06:52.054195 Failed to tls handshake with 127.0.0.1 x509: cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs

I was searched for the error and got the solution that I will have to change the openssl.cnf but I am not able to get the location of file in my system (perhaps do not have privilege ).
Is there other way possible ?

4

Got the solution here : link