I manually installed logstash on my mint virtual machine. Used the stdin and stdout version of the config file. No output. Exactly the same result. This has to be some sort of bug in logstash.
Either logstash is majorly messed up or I'm missing something really basic. For completeness I downloaded version 1.4.2. Same result.
EDIT 1:
I cannot reply any longer due to a daily limit. Here is the config:
input {
stdin {}
}
output {
stdout {}
}
EDIT 2: Still cannot reply due to daily limit Problem solved! It turns out my first logfile I am testing with is using old style line endings. This was no problem for my python program processing the CSV file, no problem for sublime or intellij. No problem even for Microsoft Excel running on my Mac. But cat didn't like it, and neither did logstash.
I know this is a really old post - but like to contribute back. But I had the same issue. I was able to solve it for my part.
Putting in debug mode I was able to get an important message:
_discover_file: /Users/wtaylor/Downloads/logstash-2.2.2/bin/Wayne.csv: skipping because it was last modified more than 86400.0 seconds ago {:level=>:debug, :file=>"filewatch/watch.rb", :line=>"310", :method=>"_discover_file"}
Pushing flush o
When I touched the log file I was reading in boom data started to process
hi...
when i run logstash config file .it display output but when we run it again then no output displayed.
its new for me.
i installed logstash 2.2,elasticsearch 2.2 and kibana 1.4.
plz reply soon .its urgent.
For ignore_older it says By default, this option is disabled, but that doesn't seem to be the case. I had trouble getting logstash to see a file, and touching it fixed it.
Here logstash is able to create logs but is not creating index in elastic search.
This is my log-config file
input {
tcp {
port => 5022
type => "syslog"
}
udp {
port => 5022
type => "syslog"
}
}
output {
elasticsearch {
hosts => ["192.168.1.103:9200"]
user => "elastic"
password => "changeme"
index => "logstash-%{+YYYY.MM.dd}"
}
stdout { codec => "rubydebug" }
}
Can anyone help me with thid
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.