Logstash is not showing me any output even after clearing the .since db file

Elastic Stack Logstash
1

configuration file:
input {
file {

path=>"\E:\kibana\logstash-7.1.1\logstash-7.1.1\data\event-data\apache_access.log"
 type => "apache-access" 
start_position=> "beginning"
     }

}

output {
stdout {

    codec=>rubydebug

       }

}
after running the logstash this is showig on the command prompt
E:\kibana\logstash-7.1.1\logstash-7.1.1>bin\logstash -f E:\kibana\logstash-7.1.1\logstash-7.1.1\config\pipeline.conf --config.reload.automatic
Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.jruby.runtime.encoding.EncodingService (file:/E:/kibana/logstash-7.1.1/logstash-7.1.1/logstash-core/lib/jars/jruby-complete-9.2.7.0.jar) to field java.io.Console.cs
WARNING: Please consider reporting this to the maintainers of org.jruby.runtime.encoding.EncodingService
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Sending Logstash logs to E:/kibana/logstash-7.1.1/logstash-7.1.1/logs which is now configured via log4j2.properties
[2019-06-13T15:45:30,346][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2019-06-13T15:45:30,367][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.1.1"}
[2019-06-13T15:45:33,523][INFO ][logstash.javapipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, :thread=>"#<Thread:0x3b58a503 run>"}
[2019-06-13T15:45:34,761][INFO ][logstash.inputs.file ] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"E:/kibana/logstash-7.1.1/logstash-7.1.1/data/plugins/inputs/file/.sincedb_0a875bbe5a2659163ba803e0c598bcbc", :path=>["\E:\kibana\logstash-7.1.1\logstash-7.1.1\data\event-data\apache_access.log"]}
[2019-06-13T15:45:34,812][INFO ][logstash.javapipeline ] Pipeline started {"pipeline.id"=>"main"}
[2019-06-13T15:45:34,882][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
[2019-06-13T15:45:34,911][INFO ][filewatch.observingtail ] START, creating Discoverer, Watch with file and sincedb collections
[2019-06-13T15:45:35,297][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
(there is no incoming output)

2

Replace backslash with forward slash in the path option of the file input.

3

Stlill no output ;

E:\kibana\logstash-7.1.1\logstash-7.1.1>bin\logstash -f E:\kibana\logstash-7.1.1\logstash-7.1.1\config\pipeline.conf --config.reload.automatic
Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.jruby.runtime.encoding.EncodingService (file:/E:/kibana/logstash-7.1.1/logstash-7.1.1/logstash-core/lib/jars/jruby-complete-9.2.7.0.jar) to field java.io.Console.cs
WARNING: Please consider reporting this to the maintainers of org.jruby.runtime.encoding.EncodingService
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Sending Logstash logs to E:/kibana/logstash-7.1.1/logstash-7.1.1/logs which is now configured via log4j2.properties
[2019-06-13T17:23:49,943][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2019-06-13T17:23:49,963][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.1.1"}
[2019-06-13T17:23:52,675][INFO ][logstash.javapipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, :thread=>"#<Thread:0x3d6628c8 run>"}
[2019-06-13T17:23:53,834][INFO ][logstash.inputs.file ] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"E:/kibana/logstash-7.1.1/logstash-7.1.1/data/plugins/inputs/file/.sincedb_68857280aef706846298b287d2a95cd3", :path=>["/E:/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log"]}
[2019-06-13T17:23:54,063][INFO ][logstash.javapipeline ] Pipeline started {"pipeline.id"=>"main"}
[2019-06-13T17:23:54,141][INFO ][filewatch.observingtail ] START, creating Discoverer, Watch with file and sincedb collections
[2019-06-13T17:23:54,314][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
[2019-06-13T17:23:54,881][WARN ][filewatch.tailmode.handlers.createinitial] failed to open /E:/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log: java.nio.file.InvalidPathException: Illegal char <:> at index 2: /E:/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log, ["java.base/sun.nio.fs.WindowsPathParser.normalize(WindowsPathParser.java:182)", "java.base/sun.nio.fs.WindowsPathParser.parse(WindowsPathParser.java:153)", "java.base/sun.nio.fs.WindowsPathParser.parse(WindowsPathParser.java:77)"]
[2019-06-13T17:23:55,051][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}

4

Did you read the error message?

5

sorry, but i didn't get .What you are trying to say (even after correcting it):

E:\kibana\logstash-7.1.1\logstash-7.1.1>bin\logstash -f E:\kibana\logstash-7.1.1\logstash-7.1.1\config\pipeline.conf --config.reload.automatic
Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.jruby.runtime.encoding.EncodingService (file:/E:/kibana/logstash-7.1.1/logstash-7.1.1/logstash-core/lib/jars/jruby-complete-9.2.7.0.jar) to field java.io.Console.cs
WARNING: Please consider reporting this to the maintainers of org.jruby.runtime.encoding.EncodingService
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Sending Logstash logs to E:/kibana/logstash-7.1.1/logstash-7.1.1/logs which is now configured via log4j2.properties
[2019-06-13T17:28:10,616][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2019-06-13T17:28:10,634][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.1.1"}
[2019-06-13T17:28:13,258][INFO ][logstash.javapipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, :thread=>"#<Thread:0x3b3d33a6 run>"}
[2019-06-13T17:28:13,828][INFO ][logstash.inputs.file ] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"E:/kibana/logstash-7.1.1/logstash-7.1.1/data/plugins/inputs/file/.sincedb_68857280aef706846298b287d2a95cd3", :path=>["/E:/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log"]}
[2019-06-13T17:28:13,896][INFO ][logstash.javapipeline ] Pipeline started {"pipeline.id"=>"main"}
[2019-06-13T17:28:13,989][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
[2019-06-13T17:28:14,041][INFO ][filewatch.observingtail ] START, creating Discoverer, Watch with file and sincedb collections
[2019-06-13T17:28:14,454][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2019-06-13T17:28:14,477][WARN ][filewatch.tailmode.handlers.createinitial] failed to open /E:/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log: java.nio.file.InvalidPathException: Illegal char <:> at index 2: /E:/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log, ["java.base/sun.nio.fs.WindowsPathParser.normalize(WindowsPathParser.java:182)", "java.base/sun.nio.fs.WindowsPathParser.parse(WindowsPathParser.java:153)", "java.base/sun.nio.fs.WindowsPathParser.parse(WindowsPathParser.java:77)"]
[2019-06-13T17:32:26,291][INFO ][logstash.pipelineaction.reload] Reloading pipeline {"pipeline.id"=>:main}
[2019-06-13T17:32:26,312][INFO ][filewatch.observingtail ] QUIT - closing all files and shutting down.
[2019-06-13T17:32:27,042][INFO ][logstash.javapipeline ] Pipeline terminated {"pipeline.id"=>"main"}
[2019-06-13T17:32:27,109][INFO ][logstash.javapipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, :thread=>"#<Thread:0x2778f5c2 run>"}
[2019-06-13T17:32:27,149][INFO ][logstash.inputs.file ] No sincedb_path set, generating one based on the "path" setting {:sincedb_path=>"E:/kibana/logstash-7.1.1/logstash-7.1.1/data/plugins/inputs/file/.sincedb_039f8a57349afd1e3fb106bf0e1c330b", :path=>["/E/kibana/logstash-7.1.1/logstash-7.1.1/data/event-data/apache_access.log"]}
[2019-06-13T17:32:27,169][INFO ][logstash.javapipeline ] Pipeline started {"pipeline.id"=>"main"}
[2019-06-13T17:32:27,174][INFO ][filewatch.observingtail ] START, creating Discoverer, Watch with file and sincedb collections
[2019-06-13T17:32:27,254][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.