SOLVED: Logstash can not connect to elasticsearch url

(W0lverine) #1

Every time ./logstash -f sample.conf is run I get this error:

The stdin plugin is now waiting for input:
[2016-11-06T19:35:35,739][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>["http://localhost:9200"]}}
[2016-11-06T19:35:35,755][INFO ][logstash.outputs.elasticsearch] Using mapping template from {:path=>nil}
[2016-11-06T19:35:35,859][WARN ][logstash.outputs.elasticsearch] Marking url as dead. {:reason=>"Elasticsearch Unreachable: [http://localhost:9200][Manticore::SocketException] Connection refused (Connection refused)", :url=>#<URI::HTTP:0x4465037 URL:http://localhost:9200>, :error_message=>"Elasticsearch Unreachable: [http://localhost:9200][Manticore::SocketException] Connection refused (Connection refused)", :error_class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
[2016-11-06T19:35:35,861][ERROR][logstash.outputs.elasticsearch] Failed to install template. {:message=>"Elasticsearch Unreachable: [http://localhost:9200][Manticore::SocketException] Connection refused (Connection refused)", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
[2016-11-06T19:35:35,862][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["localhost:9200"]}
[2016-11-06T19:35:35,866][INFO ][logstash.pipeline ] Starting pipeline {"id"=>"main", "pipeline.workers"=>2, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>250}
[2016-11-06T19:35:35,872][INFO ][logstash.pipeline ] Pipeline main started
[2016-11-06T19:35:35,930][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2016-11-06T19:35:40,757][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:url=>#<URI::HTTP:0x6ea4eb0b URL:http://localhost:9200>, :healthcheck_path=>"/"}

I have elastic(.deb) and logstash(.zip) running on a ubutunu machine. Yes the default pool is not localhost I changed it in BOTH the elasticsearch.yml and logstash.yml files to be and for some reason, it is not being updated. And Yes elasticsearch is successfully running on

logstash.yml: ""

elasticsearch.yml: ""

What other file changes do I need to make in order for logstash to recognize elasticsearch is running on and not localhost:9200?

(W0lverine) #2

SOLVED: I reinstalled logstash...I had to run logstash as root so I thought to myself maybe that was the cause, so I reinstalled it as a local user.

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.