Run Daemon Logstash

Elastic Stack Logstash
1

The same thread name. I have problem via Logstash when starting.

I want to insert logfile (eve.json) from Suricata to Etaslicsearch. I have use Logstash to import.

When i enter command: "/opt/logstash/bin/logstash -f /etc/logstash/conf.d/suricata.conf"
It's working.

I have 2 solutions need help:

  1. How to run command with daemon mode?
    "/opt/logstash/bin/logstash -f /etc/logstash/conf.d/suricata.conf"

  2. How to start file "/etc/logstash/conf.d/suricata.conf" when Logstash run?

Thanks.

2

Install LS using a DEB or an RPM, that'll handle all of that for you.

3

This step i setup Logstash.

Setup Logstash

cd /home/

echo '[logstash-2.2]
name=logstash repository for 2.2 packages
baseurl=http://packages.elasticsearch.org/logstash/2.2/centos
gpgcheck=1
gpgkey=http://packages.elasticsearch.org/GPG-KEY-elasticsearch
enabled=1' | sudo tee /etc/yum.repos.d/logstash.repo

yum -y install logstash

4

Hi all,

I have resolve my problem.

Edit file: /etc/rc.d/init.d/logstash

--
LS_USER=root
LS_GROUP=root

Yeah :D.