I have a strange issue on my ELK stack. I have ELK installed as a service that starts up as soon as my RHEL Virtual Machine (via Oracle VirtualBox) server starts. But for some reason, none of my documents are being ingested via Logstash. But when I stop the service, and manually run Logstash via:
sudo ./logstash -f /etc/logstash/conf.d/myConfig.conf --path.settings /etc/logstash/
Then the files get ingested into Elasticsearch.
Please also note that the files being ingested by Logstash are in a Shared Folder that is the path set for the file{} input in myConfig.conf. Why does it ingest okay when I run Logstash manually and not when it is run as a service?
Has anyone else run into this issue?