Hello,
I am a newbie trying to write standard output into my syslog server, I am having issues to load Syslog output plugin code. Find below the error received:
[2018-11-14T01:07:00,302][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2018-11-14T01:07:01,083][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"6.4.3"}
[2018-11-14T01:07:04,779][ERROR][logstash.plugins.registry] Tried to load a plugin's code, but failed. {:exception=>#<LoadError: no such file to load -- logstash/outputs/syslog>, :path=>"logstash/outputs/syslog", :type=>"output", :name=>"syslog"}
[2018-11-14T01:07:04,813][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::PluginLoadingError", :message=>"Couldn't find any output plugin named 'syslog'. Are you sure this is correct? Trying to load the syslog output plugin resulted in this error: no such file to load -- logstash/outputs/syslog", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:211:in lookup_pipeline_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/plugin.rb:137:inlookup'", "org/logstash/plugins/PluginFactoryExt.java:210:in plugin'", "org/logstash/plugins/PluginFactoryExt.java:166:inplugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:71:in plugin'", "(eval):16:in'", "org/jruby/RubyKernel.java:994:in eval'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:49:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:90:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:38:inexecute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:309:in `block in converge_state'"]}
Same error also received with version 6.3.1
My config file is as follow:
Author: Christian ABI KHALIL / DXC
input {
stdin{ }
}
output {
stdout {
codec => rubydebug
}
syslog {
facility => "log alert"
host => "192.168.52.100"
port => "514"
severity => "critical"
appname => "logstash"
message => "Test Message"
msgid => "ID1"
procid => "data"
rfc => "rfc5424"
sourcehost => "elkstack"
}
}
Thanks for having a look
Chris