Nagios Support Forum

My apologies, I've found the fault, I had a file 999-outputs.con.old as backup in the same conf.d directory which contained the original config i.e. 'host' param. Once deleted logstash service runs. I'm now trying to test the beats plugin. Logstash is listening on the new beats port 5545 I defined, ...

I've definitely restarted the logstash service, a few times, to double check that I've followed the same process you did. Latest run: I've removed the 'hosts' parameter as follows [root@localhost conf.d]# vi 999_outputs.conf as follows: output { elasticsearch { document_type => '%{type}' workers => ...

I thought perhaps adding the 'hosts' parameter to the output file 999_outputs.conf as there was a 'host' parameter in the original version but no change, it still fails to start with the same error message in the log file output { elasticsearch { hosts => 'localhost' document_type => '%{type}' worke...

Thanks for your help so far. I've followed the test instructions and the beats plugin has installed ok but I've hit a problem, the logstash service crashes on start up. This is the only error I see in /var/log/logstash/logstash.log even with debug option in the command line. Any ideas? {:timestamp=>...

Thanks that will be great, I appreciate you following it up. If you could provide me with test instructions, I understand the conditions they will run under. This is a proof of concept install here so there will be a re-install anyway.

Cheers,
Des

Closer but no go. It upgrades logstash-codec-multiline from current 0.1.9 to 1.0.0 only but not to the >2.0.3 that beats requires. [root@localhost logstash]# bin/plugin update logstash-codec-multiline Updating logstash-codec-multiline Updated logstash-codec-multiline 0.1.9 to 1.0.0 Updated logstash-...

Hi all, I'm evaluating the Log Server using the downloaded ovm and installed as a virtual on my network. One of the needs I'm looking at is to capture large numbers of application logs from a number of linux hosts. The beats plugin with the filebeat log stash forwarder seems appropriate from my read...