I have a rhel ppc64le with tomcat. Wanted to send logs to ELK cluster (filebeat discarted because has no ppc version, so I choose logstash).
If I run logstash from CLI, it works fine and I can discover logs in KIbana. But if I start logstash service, stop sending logs. Theese are commands issued:
Okay, I did it (I did run with root user and logstash user, getting same behavior).
It's weird but is not logging anything (I'm checking /var/log/logstash/logstash-plain.log and /var/log/messages). No logs are sending to Kibana, but process is running.
When you ran from the command line as root, files were probably created owned by root. When you run from systemctl, it will probably run with user logstash and won't have permission to the files it needs to run. The pid file is the most notorious.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.