following is my logstash config file . configtest shows OK but I'm getting "Pipeline aborted due to error" in logstash logs.
logstash config
input {
tcp {
port => 5000
type => 'eventlog'
codec => json {
charset => 'UTF-8'
}
}
}
filter {
if [type == 'eventlog'] {
grok {
match => [ 'TimeCreated', "Date(%{NUMBER:timestamp})" ]
}
date {
match => [ 'timestamp', 'UNIX_MS' ]
}
}
}
output {
if [type == 'eventlog'] {
elasticsearch {
hosts => ["localhost"]
port => 9300
node_name => 'wintest'
index => "logstash-evenlog-%{+YYYY.MM.dd}"
}
}
}
Please help