Most basic Logstash to secure cluster.conf

[bigdamhero (Patrick)]

Continued troubles, frustration rising.

Version 6.5.4
Logstash running on Ubuntu 16 - OpenJDK

I'm looking for recommendations on the easiest .conf file to test a connection.

Should I pull syslog? no filter?

What would you do?

[bigdamhero (Patrick)]

I'm thinking to create a file input. Can anyone share a simple file input formatted .conf sample?

Thank you

[bigdamhero (Patrick)]

I created this test.conf file, tested it on my non secure environment and got it working in about 15 min. I tried to move it to my secure environment, im not getting many errors but not sure how to address the few i have.

Here is the cat of my test.conf

#Simple basic test file
#
input {
  file {
    type => "logstash-logs"
    path => "/var/log/logstash/logstash-plain.log"
#    sincedb_path => "/var/log/logstash/dead.letter.cue"
#    codec => multiline {
#      pattern => "^\*\*"
#      negate => true
#      what => "previous"
#    }
  }
}

output {
   elasticsearch {
     hosts => "https://ealstic-node-1:9200"
     index => "testlog-%{+YYYY.MM.dd}"
     user => "logstash_internal"
     password => 'password'
     ssl => true
#       cacert => "/etc/logstash/config/certs/cert.crt"
       cacert => "/usr/share/logstash/config/certs/cert.crt"
   }
}

Let me know if you see anything.
Thank you for your time.