Hi
I am trying to send syslog from apigee to logstash. Logstash receives the data for sometime and if I try after 10 minutes , it stops listening. I don't see data flowing through the port. It blocks the port is my theory.
I am able to send data to different port from apigee and if I change the port again in logstash restart its works in new port for sometime. I am not sure where I am going wrong. Any help would be appreciated.
input {
syslog {
port => 5244
type => "syslog"
}
}
filter {
dissect {
mapping => {
message => "%{data}|%{field1}|%{field2}|%{field3}"
}
}
}
output {
amazon_es {
hosts => ['sample.com']
region => 'eu-west-1'
aws_access_key_id => ''
aws_secret_access_key => ''
index => "logs-%{+YYYY.MM.dd}"
manage_template => false
}
}
Thanks,
Vakitha M