Unable to ship logs from beats to logstash

Elastic Stack Beats
21

Do you see messages flowing in the rabbitmq queue?

If you want to discard problems sending to rabbitmq, you can also configure a file output in Logstash, to check the events that are being received and sent to the outputs.

22

Hello @jsoriano

Thanks for your suggestion.

Im trying to setup logstash with output but its giving me out some errors. These are config

output{
 file {
    path => /tmp/test
    file_mod => 0644
    codec => plain
}
}
23

Hello @jsoriano

The below is the configuration i have setup on logstash.

xpack.management.enabled: true
xpack.management.pipeline.id: ["beats", "dlq"]
xpack.management.elasticsearch.username: 
xpack.management.elasticsearch.password: ${}
xpack.management.elasticsearch.hosts: [
  "server1:9200",
  "server2:9200",
  "server3:9200"
]
xpack.management.elasticsearch.ssl.certificate_authority: /etc/logstash/cert.crt
xpack.management.elasticsearch.ssl.verification_mode: certificate


output {
  file {
    path => "/tmp/test"
    file_mode => 0644
  }
}`
24

What errors is it giving?

25

Failed to load settings file from "path.settings". Aborting... path.setting=/etc/logstash, exception=Java::OrgLogstashSecretStore::SecretStoreException::LoadException, message=>Found a file at /etc/logstash/logstash.keystore, but it is not a valid Logstash keystore.

26

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.