I have two Apache webservers (1x uat and 1x prod). I am sending the logs to my ELK setup for both of them. For the UAT one, it is working fine. For the PROD one, the logs are now shown in Kibana. I need some help to debug it, and find out where the issue is. I'll post some config files below so y…

The string /web/access_log never occurs in that file, which tells me that logstash never sees the file. Are you sure that the name is right and that logstash has execute access to that directory?

Discuss the Elastic Stack

Lotstash is not picking Apache Logs config

Elastic Stack Logstash

Badger October 9, 2019, 8:49pm 6

It sounds as though the file input is not reading the file. Enable tracing as described in this post and see what filewatch has to say.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.