Stashing my first pipeline with Filebeat and Logstash

[Suryakumar]

Hi,

I have just started using elasticsearch. I am now trying the first example with Filebeats and logstash as given in this tutorial : [https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html.]

I am facing two difficulties.

• First I cannot find data registry file as mentioned in the tutorial.
• Second as I followed other steps except the deletion of data registry file mentioned above, but I am not getting the expected output.
  Rather I got this error message.(Image)

Please help me out to solve this.

Note: I am using Ubuntu 16.04

Thanks,
Suryakumar

[adrisr (Adrian Serrano)]

You can find the data registry file in the /var/lib/filebeat/ directory, which needs root permissions to be accessed.

Try to follow the complete steps again now that you have access to the registry.

If after that you are still facing problems, please provide the full debug log (run with -d "*" instead of -d publish) so we can check if there are any problems submitting events to logstash.

Also, paste the output of curl -XGET 'localhost:9200/_cat/shards' to see which indexes get created.

[Suryakumar]

Thank you so much for your reply @adrisr.. Yes that is the problem. I navigated to /var/lib/filebeat/ , deleted the registry and continued the steps again. Now it is working fine.

Thanks again!