No config files found in path {:path=>"C:/logstash-7.15.1/bin/logstash.conf"}

Elastic Stack Logstash
1

[2021-10-27T11:13:19,509][INFO ][logstash.config.source.local.configpathloader] No config files found in path {:path=>"C:/logstash-7.15.1/bin/logstash.conf"}
[2021-10-27T11:13:19,521][DEBUG][logstash.api.service ] [api-service] start
[2021-10-27T11:13:19,531][ERROR][logstash.config.sourceloader] No configuration found in the configured sources.
[2021-10-27T11:13:19,575][DEBUG][logstash.agent ] Converging pipelines state {:actions_count=>0}
[2021-10-27T11:13:19,618][DEBUG][logstash.instrument.periodicpoller.os] Stopping
[2021-10-27T11:13:19,639][DEBUG][logstash.instrument.periodicpoller.jvm] Stopping
[2021-10-27T11:13:19,642][DEBUG][logstash.instrument.periodicpoller.persistentqueue] Stopping
[2021-10-27T11:13:19,644][DEBUG][logstash.instrument.periodicpoller.deadletterqueue] Stopping
[2021-10-27T11:13:19,656][DEBUG][logstash.agent ] Shutting down all pipelines {:pipelines_count=>0}
[2021-10-27T11:13:19,664][DEBUG][logstash.agent ] Converging pipelines state {:actions_count=>0}
[2021-10-27T11:13:20,062][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2021-10-27T11:13:24,848][INFO ][logstash.runner ] Logstash shut down.
[2021-10-27T11:13:24,868][DEBUG][logstash.agent ] Error in reactor loop escaped: closed stream (IOError)
[2021-10-27T11:13:24,870][DEBUG][logstash.agent ] ["org/jruby/RubyIO.java:3067:in read'", "org/jruby/RubyIO.java:3049:in read'", "C:/logstash-7.15.1/vendor/bundle/jruby/2.5.0/gems/puma-4.3.8-java/lib/puma/reactor.rb:160:in block in run_internal'", "org/jruby/ext/thread/Mutex.java:164:in synchronize'", "C:/logstash-7.15.1/vendor/bundle/jruby/2.5.0/gems/puma-4.3.8-java/lib/puma/reactor.rb:159:in block in run_internal'", "org/jruby/RubyArray.java:1820:in each'", "C:/logstash-7.15.1/vendor/bundle/jruby/2.5.0/gems/puma-4.3.8-java/lib/puma/reactor.rb:157:in run_internal'", "C:/logstash-7.15.1/vendor/bundle/jruby/2.5.0/gems/puma-4.3.8-java/lib/puma/reactor.rb:313:in block in run_in_thread'"]
[2021-10-27T11:13:24,859][FATAL][org.logstash.Logstash ] Logstash stopped processing because of an error: (SystemExit) exit
org.jruby.exceptions.SystemExit: (SystemExit) exit
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~[jruby-complete-9.2.19.0.jar:?]
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:710) ~[jruby-complete-9.2.19.0.jar:?]
at C_3a_.logstash_minus_7_dot_15_dot_1.lib.bootstrap.environment.(C:\logstash-7.15.1\lib\bootstrap\environment.rb:94) ~[?:?]

logstash.conf

input {
file {
type => "java"
path => "C:/elk/spring-boot-elk.log"
codec => multiline {
pattern => "^%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{TIME}.*"
negate => "true"
what => "previous"
}
}
}

filter {
#If log line contains tab character followed by 'at' then we will tag that entry as stacktrace
if [message] =~ "\tat" {
grok {
match => ["message", "^(\tat)"]
add_tag => ["stacktrace"]
}
}

}

output {

stdout {
codec => rubydebug
}

Sending properly parsed log events to Elasticsearch

Elasticsearch {
hosts => ["localhost:9200"]
}
}

2
21920×1080 115 KB

2

Welcome to our community! :smiley:

It's not clear what you are asking here sorry.

3

Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable.

Instead, paste the text and format it with </> icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer.

It would be great if you could update your post to solve this.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.