elasticsearch - Can't ship log from local server -


this question has answer here:

i'have problem related logstash , elasticsearch.

when try ship logs via logstash remote machine elasticsearch server, no problem, index created. when try ship logs via logstash server hosting elasticsearch, no index created, nothing happens.

logging logstash shows logstash sees whitout problem logs i'm trying ship.

i can't figure out why happening. idea ? lot

es version : 1.0.1 logstash version : 1.4.0

logstash config file :

input {        file {     type => "dmprocess"     path => "/logs/mysql.log*"   }     }  filter{        grok{         type => "dmprocess"         match => [ "message", "%{datestamp:processtimestamp} %{greedydata} extraction done %{word:alias} took %{number:milliseconds:int} ms %{number:rows:int} rows",                    "message", "%{datestamp:processtimestamp} %{greedydata} : %{greedydata} %{word:alias} took %{number:milliseconds:int} ms"]     }          date{         match => [ "processtimestamp", "yy/mm/dd hh:mm:ss"]      }    }  output {       elasticsearch {      host=>"devmonxde"     cluster => "devcluster"      }  } 

update: seems i'am not able ship logs via input:file elasticsearch instance(remote or local) linux host. though able send data es via input:stdin. no connection/port problem.

it works charm if run logstash same config, windows host.

the default behaviour on windows seems "beginning". in contradiction doc http://logstash.net/docs/1.4.0/inputs/file#start_position

it seems logstash not import old logs, start_position="beginning" of file input.

the problem old log not imported es. i'am creating post this. old logs not imported es logstash

my first try change host localhost, 127.0.0.1 or external ip address make sure host name not problem.

another thing add output log console, easy way check if messages coming in , parsed right way.


Comments

Popular posts from this blog

android - Get AccessToken using signpost OAuth without opening a browser (Two legged Oauth) -

org.mockito.exceptions.misusing.InvalidUseOfMatchersException: mockito -

google shop client API returns 400 bad request error while adding an item -