Logstash internal monitoring not sending any info

Elastic Stack Logstash
1

Hi,
I've setup Elasticsearch, Kibana and Logstash using https://www.elastic.co/guide/en/elastic-stack/current/installing-elastic-stack.html
I activated monitoring from Kibana monitoring UI.
then I tried configuring the logstash internal collection of monitoring data (https://www.elastic.co/guide/en/logstash/current/monitoring-internal-collection.html) by adding the xpack.monitoring.collection.enabled: true in elasticsearch.yml config, then the xpack.monitoring.enabled: trueand xpack.monitoring.elasticsearch.hosts: ["http://localhost:9200"] in logstash.yml
But there is no logstash monitoring index created in Elasticsearch, and no data displayed in Kibana monitoring...
Any clue please?
Thanks a lot in advance!

2

Did you secure elasticsearch? If so, you will need to add security to the logstash elasticsearch output.

3

No, in the simple installation guide there is no security
So I didn't set any
It's supposed to work as well without authentication right?

4

Do you have any defined pipelines? The stack monitoring UI will not show any logstash monitoring data if it does not detect any pipelines.

5

Hi Chris,
I do have a "main" pipeline, but I'm running logstash with a -f file.conf
not using multiple pipelines, not using central management either

6

Ok, you can do this to see if get stats:

curl -XGET 'localhost:9600/_node/stats/events?pretty'

Any errors in logstash or elastic logs? Is logstash processing events that are getting to elasticsearch?

7

Try running this query against the monitoring cluster and return the results:

POST .monitoring-logstash-*/_search
{
  "size": 1,
  "sort": [
    {
      "timestamp": {
        "order": "desc"
      }
    }
  ],
  "query": {
    "term": {
      "type": {
        "value": "logstash_stats"
      }
    }
  },
  "collapse": {
    "field": "cluster_uuid"
  }
}
8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.