Hi,
I am trying to read a sample apache log file from file beat and push it to Logstash. I am not seeing any error in debug mode. Index not being created in ES.
Logstash.conf file
input {
beats {
port => "5044"
}
}
filter {
grok {
match => { "message" => "%{COMBINEDAPACHELOG}"}
}
geoip {
source => "clientip"
}
}
output {
elasticsearch {
hosts => [ "localhost:9200" ]
}
}
logstash in debug mode
logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.lib.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqcheck", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqrepair", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ruby", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/setup.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/system-install"]}
[2019-02-26T16:36:19,790][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config_file=>"C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-sample.conf"}
[2019-02-26T16:36:19,794][DEBUG][logstash.agent ] Converging pipelines state {:actions_count=>0}
[2019-02-26T16:36:20,862][DEBUG][logstash.instrument.periodicpoller.cgroup] One or more required cgroup files or directories not found: /proc/self/cgroup, /sys/fs/cgroup/cpuacct, /sys/fs/cgroup/cpu
[2019-02-26T16:36:22,357][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ParNew"}
[2019-02-26T16:36:22,358][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ConcurrentMarkSweep"}
[2019-02-26T16:36:22,780][DEBUG][logstash.config.source.local.configpathloader] Skipping the following files while reading config since they don't match the specified glob pattern {:files=>["C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/benchmark.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/cpdump", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/dependencies-report", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ingest-convert.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.lib.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqcheck", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqrepair", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ruby", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/setup.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/system-install"]}
[2019-02-26T16:36:22,784][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config_file=>"C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-sample.conf"}
[2019-02-26T16:36:22,795][DEBUG][logstash.agent ] Converging pipelines state {:actions_count=>0}
[2019-02-26T16:36:23,361][DEBUG][logstash.pipeline ] Pushing flush onto pipeline {:pipeline_id=>"main", :thread=>"#<Thread:0x1bb488f5 sleep>"}
[2019-02-26T16:36:25,785][DEBUG][logstash.config.source.local.configpathloader] Skipping the following files while reading config since they don't match the specified glob pattern {:files=>["C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/benchmark.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/cpdump", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/dependencies-report", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ingest-convert.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.lib.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqcheck", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqrepair", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ruby", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/setup.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/system-install"]}
[2019-02-26T16:36:25,787][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config_file=>"C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-sample.conf"}
[2019-02-26T16:36:25,798][DEBUG][logstash.agent ] Converging pipelines state {:actions_count=>0}