Make idices

I use winlogbeats i want to get log from winlogbeats and send to logstash then logstash import to elasticsearch. default in /etc/logstash/conf.d doesnt exist winlogbeat and i use pipelines.yaml and make new file but i cant recive log and i do this thing from this [video] (How to processing log files using Filebeat, Logstash and Kibana - ElasticStack - YouTube) but in Index Management doesnt make winlogbeat

and in log of logstash get this
[2021-05-24T20:39:25,152][WARN ][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][winlogbeats] A gauge metric of an unknown type (org.jruby.RubyArray) has been create for key: cluster_uuids. This may result in invalid serialization.
please help me :sob: :sob: :sob: :sob: :sob:

I assume you have configure winlogbeat output to logstash by following this Instruction, and I assume this is new index.

What happens when you run your logstash without pipelines.yml
/usr/share/logstash/bin/logstash -f (yourconf).conf

To make everything easier, you might want to show your winlogbeat.yml and logstash.conf

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.