Logstash input configure

cat /etc/logstash/conf.d/02-beats-input.conf

input {
beats {
path => "/var/log/messages"
type => syslog
}

beats {
path => "/var/log/apache/access.log"
type => apache
}
port => 5044
ssl => true
ssl_certificate => "/etc/pki/tls/certs/office-logstash.crt"
ssl_key => "/etc/pki/tls/private/office-logstash.key"
}

/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/02-beats-input.conf --config.test_and_exit

[FATAL] 2017-12-05 13:35:37.783 [LogStash::Runner] runner - The given configuration is invalid. Reason: Expected one of #, { at line 11, column 10 (byte 160) after input {
beats {
path => "/var/log/messages"
type => syslog
}

beats {
path => "/var/log/apache/access.log"
type => apache
}
port

what is wrong?

You have a beats input that based on the parameters look like it should be a file input. Your ssl parameters also do not seem to belong to any plugin.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.