Installed logstash 5.4.3 and elasticsearch 5.4.3 on Centos 7.3.1611
The configuration file in /etc/logstash/conf.d has the following lines
input {
tcp {
port => 5000
type => syslog
}
udp {
port => 5000
type => syslog
}
}
filter {
if [type] == "syslog" {
grok {
match => { "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:[%{POSINT:syslog_pid}])?: %{GREEDYDATA:syslog_message}" }
add_field => [ "received_at", "%{@timestamp}" ]
add_field => [ "received_from", "%{host}" ]
}
date {
match => [ "syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
}
output {
elasticsearch {
hosts => ["10.100.10.151:9200"]
user => "logstash_internal"
password => ""
}
stdout { codec => rubydebug }
}
When the elasticsearch start the following error shows in the error log
Error registering plugin
@output_class=LogStash::Outputs::ElasticSearch>", :error=>"undefined method `tr' for nil:NilClass"}
The error will stop the pipeline.
Please help
Robert
