Not able to connect to ElasticSearch 5.4 from logstash 5.4


(Nikhil Pawar) #1

Hi ,

I am trying to send log file after parsing data to elastic search and display data through kibana . My filter is working OK and able to display parsed data at command line but not able to send to elasticsearch . Can someone please advise

Config file at logstash server:- , indexname =

input {
beats {
port => 5044
}
}
filter {
grok {
match => { "message" => "^(?[[^]]*])%{SPACE}:|:%{SPACE}(?:\s+%{WORD:level})?%{SPACE}:|:%{SPACE}
(?:\s+%{USERNAME:hostname})?%{SPACE}:|:%{SPACE}(?:\s+%{GREEDYDATA:coidkey})?%{SPACE}:|:%{SPACE}(?:\s+%{GREEDYDATA
:clientinfo})?%{SPACE}:|:%{SPACE}(?:\s+%{IP:clientip})?%{SPACE}:|:%{SPACE}(?:\s+%{GREEDYDATA:Url})?%{SPACE}:|:
%{SPACE}(?:\s+%{JAVACLASS:class})?%{SPACE}:|:%{SPACE}%{USER:ident}%{SPACE}(?:\s+%{GREEDYDATA:msg})?$"}
}
}
output {
stdout { codec => rubydebug }

elasticsearch {
hosts => "dfdevserver1.df.jabodo.com:9200"
index => "vicinio-prod"
document_type => "log"
}
}

Thanks


(Mark Walkom) #2

What are you seeing then?


(Nikhil Pawar) #3

looked like it was a port issue . out network engineer helped out to resolve the issue .. thanks guys


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.