Logstash loglevel

[BDRThermea]

Hi,

Is it possible to tweak the loglevel of Logstash to figure out a bug in our infrastructure.
I'd like to gain insights into how a messages is received in Logstash and then forwarded to ElasticSearch.


Thanks,
Rick

[cdienger]

Debug logging can be enabled with the following steps:

1. Edit /etc/init.d/logstash and change line 64 from:

DAEMON_OPTS="agent -f ${LS_CONF_DIR} -l ${LS_LOG_FILE} ${LS_OPTS}"

to:

DAEMON_OPTS="agent -f ${LS_CONF_DIR} -l ${LS_LOG_FILE} ${LS_OPTS} --debug"

2. Restart the service logstash with:

systemctl daemon-reload
service logstash restart

This increases the logging in /var/log/logstash/logstash.log. It can generate A LOT of data so you only want to enable this for short periods of time - just long enough to reproduce the behavior - and then revert the changes.

[BDRThermea]

Thanks, for your reply.

[scottwilkerson]

Thanks, for your reply.

No problem, let us know if you have any difficulty