- ELK version - 6.2.2
- SG version - 6.2.2-22.0
- JVM version - build 1.8.0_161-b12
I installed the NetFlow module and registered its parameters in logstash.yml:
modules:
- name: netflow
var.elasticsearch.hosts: "logstash.taxnet.ru:9200"
var.elasticsearch.username: "admin"
var.elasticsearch.password: "admin"
var.elasticsearch.ssl.enabled: true
var.elasticsearch.ssl.verification)mode: disable
var.elasticsearch.ssl.certificate_authority: "/etc/logstash/"
var.kibana.scheme: "http"
var.kibana.host: "logstash.taxnet.ru"
var.kibana.username: "admin"
var.kibana.password: "admin"
var.input.udp.port: 2055
Also commented path.config.
In pipelines.yml i wrote:
- pipeline.id: module_netflow
path.conf: "/etc/logstash/conf.d/logstash.conf"
In logstash.conf:
input {
udp {
port => 2055
codec => netflow
}
}
When I restart logstash.service it's wrote:
[logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
I try to use solution from here, but deleting --path.config from ExecStart=/usr/share/logstash/bin/logstash "--path.settings" "/etc/logstash" not work.
Please help