Logstash stdout going to syslog

Elastic Stack Logstash
1

I have just installed logstash 5.2.0 on a clean Ubuntu 16.04, and my 'metric' filter is now writing its 1-minute document count and rates to syslog instead of logstash.stdout.

Is this a change in 5.2.0?

With 2.4, it used to be logstash.stdout in the /var/log/logstash folder, this seemed to change to a variant of logstash.stdout (IIRC it had other alphanumerics in the name) in /var/log, but now the output only appears in syslog.

FTR, the relevant part of my config is as follows:

filter
{
metrics {
meter => "documents"
add_tag => "metric"
flush_interval => 60
}
}
output {
if "metric" in [tags] {
stdout {
codec => line {
format => "1m rate: %{[documents][rate_1m]} ( %{[documents][count]} )"
}
}
}
}

Andrew.

2

Can no-one explain this?
Andrew

3

Odd - logstash 5.2.1 on Ubuntu 14.04 doesn't seem to write stdout anywhere when running as a service. Perhaps this is by design?

4

OK, I needed a bit of knowledge about upstart - I found that stdout is now written to /etc/upstart/logstash.log.
Problem solved.

5

Oops - that path should have been /var/log/upstart/logstash.log.

6

On CentOS, there is NO /var/log/upstart folder, and /var/log/logstashlogstash-plain.log does NOT show what used to be in /var/log/logstash/logstash.stdout.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.