Logstash ran as service won't read logs only when ran through the command line

[ELI_MA]

@leandrojmp

What do you mean with that? You removed this from the logstash.service file? This is not correct, this is required.

that was one of the suggestions in this post Pipelines.yml ignored on logstash running as a service

to change line below in /etc/systemd/system/logstash.service

ExecStart=/usr/share/logstash/bin/logstash "--path.settings" "/etc/logstash"

to

ExecStart=/usr/share/logstash/bin/logstash 

But I've reverted the change