Reading logfile but no result

Hi, I am using 5.6.8 logstash/elastic in Ubuntu12.

run the following commands:

./bin/logstash -f logstash.conf

logstash.conf :

input {
file {
path => "/tmp/access"
}
}

filter {

grok {
  match => { "message" => "%{COMBINEDAPACHELOG}" }
}

}

output {
elasticsearch {
hosts => ["localhost:9200"]
}
}

but, the result is ( I set log.level: trace):

……………………………………………………………………

[2018-03-20T23:54:48,082][INFO ][logstash.pipeline ] Starting pipeline {"id"=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>500}
[2018-03-20T23:54:48,289][TRACE][logstash.inputs.file ] Registering file input {:path=>["/tmp/access"]}
[2018-03-20T23:54:48,313][INFO ][logstash.pipeline ] Pipeline main started
[2018-03-20T23:54:48,338][DEBUG][logstash.agent ] Starting puma
[2018-03-20T23:54:48,359][DEBUG][logstash.agent ] Trying to start WebServer {:port=>9600}
[2018-03-20T23:54:48,362][DEBUG][logstash.api.service ] [api-service] start
[2018-03-20T23:54:48,360][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:54:48,406][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2018-03-20T23:54:53,333][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:54:58,335][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:02,390][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:55:03,336][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:08,336][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:13,338][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:17,410][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:55:18,339][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:23,339][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:28,340][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:32,428][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:55:33,342][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:38,343][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:43,343][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:47,458][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:55:48,357][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:53,358][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:55:58,358][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:56:02,504][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:56:03,359][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:56:08,362][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:56:13,367][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:56:17,596][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []
[2018-03-20T23:56:18,368][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
[2018-03-20T23:56:23,369][DEBUG][logstash.pipeline ] Pushing flush onto pipeline
…………………………………………

no stop for serveral hours, then I stop with ctr-c

I don't know the reason, and
"[2018-03-20T23:19:53,526][DEBUG][logstash.inputs.file ] _globbed_files: /tmp/access: glob is: []" is normal?

Can you help me?

read logfile via filebeat

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.