I have recently installed logstash with apt package repository.
Every thing is as default, I have added /etc/logstash/conf.d/filebeat.conf where it should listen to port 5044 for incoming beat.
If logstash is started normally, it does not listen to port 5044. netstat -tulnp does not show the listening port. And I am confused to which port logstash is listening by default. log does not show any error as well.
But if i specify the conf file location, the intended port is listening and every thing works fine.
I did as you said but the result gives me following error, some how it is unable to fetch logstash.yml and log4j2 files under /etc/logstash. I never had such issue with version 6.3. Do you think logstash 6.4 has some issue or different way of configuring?
Error/Warning
WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
ERROR: Failed to read pipelines yaml file. Location: /usr/share/logstash/config/pipelines.yml
usage:
bin/logstash -f CONFIG_PATH [-t] [-r] [] [-w COUNT] [-l LOG]
bin/logstash --modules MODULE_NAME [-M "MODULE_NAME.var.PLUGIN_TYPE.PLUGIN_NAME.VARIABLE_NAME=VALUE"] [-t] [-w COUNT] [-l LOG]
bin/logstash -e CONFIG_STR [-t] [--log.level fatal|error|warn|info|debug|trace] [-w COUNT] [-l LOG]
bin/logstash -i SHELL [--log.level fatal|error|warn|info|debug|trace]
bin/logstash -V [--log.level fatal|error|warn|info|debug|trace]
bin/logstash --help
[ERROR] 2018-09-03 20:09:59.018 [LogStash::Runner] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.