Trying to follow Logstash tutorial

Elastic Stack Logstash
1

On centos 7, I've installed logstash, and beats via the repo mentioned in the docs. The very first test at "https://www.elastic.co/guide/en/logstash/current/first-event.html" works.

Now I'm trying "https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html" Beats and Logstash start (i think) without error. Port 5044 is listening. Yet I don't see any of the log records echoed to stdout in the console where logstash is running.

What am I doing wrong? How to debug?

2

Alright. Basically the tutorial skips settings you need!

In the filebeat.yml file, filebeat.inputs section, change

enable: false

to

enabled: true

Comment out

output.elasticsearch:

Comment out

hosts: ["localhost:9200"]"

in output.elasticsearch section.

Make sure "output.logstash:" is not commented out, and make sure it has

hosts: ["localhost:5044"]

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.