Not able to ingest data into Elastic Endpoint using Logstash (Using logstash On Windows)

Elastic Stack Logstash
1

Hi,

I am trying to ingest data into elasticsearch using logstash (on Windows OS) by following the example present here:

However, I still see No Monitoring Data Found on the Kibana page.

The following is the sample apache log file I am using:

The following is the .conf :
input {
file {
path => "/PathTo/apache_logs.txt"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}

filter {
grok {
match => {
"message" => '%{IPORHOST:clientip} %{USER:ident} %{USER:auth} [%{HTTPDATE:timestamp}] "%{WORD:verb} %{DATA:request} HTTP/%{NUMBER:httpversion}" %{NUMBER:response:int} (?:-|%{NUMBER:bytes:int}) %{QS:referrer} %{QS:agent}'
}
}

date {
match => [ "timestamp", "dd/MMM/YYYY:HH:mm:ss Z" ]
locale => en
}

geoip {
source => "clientip"
}

useragent {
source => "agent"
target => "useragent"
}
}

output {
elasticsearch {
hosts => "https://xxxxx.us-west-1.aws.found.io:9243"
user => "xxxxxx"
password => "xxxxxxx"
index => "apache_elastic_example"
template => "./apache_template.json"
template_name => "apache_elastic_example"
template_overwrite => true
}
stdout { codec => rubydebug }
}

Could someone please tell me what I am missing here ??

2

Is there anything in stdout?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.