hriegger
(Harry RIegger)
June 26, 2019, 1:02pm
1
After upgrading logstash to 7.1.1 and activating xpack security logstash does not start
Log:
hriegger:
Jun 26 14:26:53 syslogbicp1 logstash[21260]: [2019-06-26T14:26:53,420][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::Elasticsearch", :hosts=>["//127.0.0.1 "]}
Jun 26 14:26:53 syslogbicp1 logstash[21260]: warning: thread "Ruby-0-Thread-7: :1" terminated with exception (report_on_exception is true):
Jun 26 14:26:53 syslogbicp1 logstash[21260]: LogStash::Outputs::Elasticsearch::HttpClient::Pool::BadResponseCodeError: Got response code '403' contacting Elasticsearch at URL 'http://127.0.0.1:9200/logstash '
03-output.conf
role logstash_writer
hriegger:
{ "logstash_writer" : {
"cluster" : [ "manage_index_templates", "monitor", "manage_ilm" ],
"indices" : [
{
"names" : [ "logstash-*" ],
"privileges" : [ "write", "delete", "create_index", "manage", "manage_ilm" ],
"allow_restricted_indices" : false
} ],
"applications" : [ ],
"run_as" : [ ],
"metadata" : { },
"transient_metadata" : { "enabled" : true }
}}
system
(system)
Closed
July 24, 2019, 1:02pm
2
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.