Dear all,
My Logstash is not reading config files I have specified in pipelines.yml.
pipelines.yml
# This file is where you define your pipelines. You can define multiple.
# For more information on multiple pipelines, see the documentation:
# https://www.elastic.co/guide/en/logstash/current/multiple-pipelines.html
- pipeline.id: main
path.config: "/opt/logstash-8.1.0/config/conf.d/*.conf"
In the path, I have syslog.conf that's owned by the logstash user and have permission 644 on this file. However, logs from Logstash keeps telling it couldn't find any config file under the path, and stopped since no pipeline has been initialized:
[2022-03-23T17:30:05,289][INFO ][logstash.config.source.local.configpathloader] No config files found in path {:path=>"/opt/logstash-8.1.0/config/conf.d/*.conf"}
ls -l /opt/logstash-8.1.0/config/conf.d/
-rw-r--r-- 1 logstash logstash 1003 Mar 23 16:10 syslog.conf
As specified in my logstash.service file, I'm running this as logstash user:
[Unit]
Description=logstash
[Service]
Type=simple
User=logstash
Group=logstash
# Load env vars from /etc/default/ and /etc/sysconfig/ if they exist.
# Prefixing the path with '-' makes it try to load, but if the file doesn't
# exist, it continues onward.
EnvironmentFile=-/etc/default/logstash
EnvironmentFile=-/etc/sysconfig/logstash
ExecStart=/opt/logstash-8.1.0/bin/logstash "--path.settings" "/opt/logstash-8.1.0/config"
Restart=always
WorkingDirectory=/
Nice=19
LimitNOFILE=16384
# When stopping, how long to wait before giving up and sending SIGKILL?
# Keep in mind that SIGKILL on a process can cause data loss.
TimeoutStopSec=infinity
[Install]
WantedBy=multi-user.target