Hi. My logstash is sending logs to /var/log/syslog, which is causing the disk to fill up pretty quick. How can I disable it? My logstash.yml: log.level: info path.logs: /var/log/logstash syslog: root@elk:/etc/logstash# tail -n 10 /var/log/syslog Oct 7 14:28:39 elk logstash[7097]: "enviro…

The solution proposed here solved my problem.

I would guess that you are running logstash as a service and whatever service manager you are using is cc'ing stdout to /var/log/syslog. You can reconfigure that in the service manager.

Yes.. I thought that too.. but it is not the case. Locate logstash.service: root@elk:~# locate logstash.service /etc/systemd/system/logstash.service /etc/systemd/system/multi-user.target.wants/logstash.service file /etc/systemd/system/logstash.service: [Unit] Description=logstash [Service] Type…

This issue seems to be related.

Discuss the Elastic Stack

Removing Logstash logs from syslog

Elastic Stack Logstash

Badger October 8, 2019, 11:28pm 5

This issue and this issue are related.

Topic		Replies	Views
Prevent Logstash Service logging to /var/log/syslog Logstash	2	814	April 14, 2020
Logstash loging stdout output to syslog Logstash	1	1107	October 6, 2017
How to Disable logstash error logging in syslog Logstash	2	1184	December 14, 2019
6.7.1 - Unexpected Log Destination Logstash	3	575	May 13, 2019
Logstash writing logs to syslog even though no output configured Logstash	1	324	March 7, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Removing Logstash logs from syslog

Related topics