Can somebody please help me setup logstash? I am trying to send the event logs from windows server to logstash and then to elasticsearch. I installed Elasticsearch and Kibana successfully. Then i installed logstash and created a.conf file to receive event logs via port 5044 and send it to elastic search. But winlogbeat log file showing it sends datato logstash but in logstash side nothing happening.
My .conf file,
input {
beats {
port => 5044
}
}
filter {
}
output {
elasticsearch {
hosts => ["172.20.11.19:9200"]
sniffing => true
manage_template => true
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
stdout { codec => rubydebug }
}
I didn't change anything in logstash.yml