Nagios Support Forum

Hello There,

logstash.log file is filling up pretty fast in our Nagios Log Server. I am seeing lot of grokparsefailure messages, not sure if this has got anything to do with this. grokparsefailure message were flowing in the past as well, but this issue started just today.

Thank You,
SB

Locking since this is a duplicate of https://support.nagios.com/forum/viewto ... 33#p270933:

You can disable the logging by editing /etc/init.d/logstash and changing line 64:

DAEMON_OPTS="agent -f ${LS_CONF_DIR} -l ${LS_LOG_FILE} ${LS_OPTS}"

to:

DAEMON_OPTS="agent -f ${LS_CONF_DIR} ${LS_OPTS}"

Then restart the service:

systemctl daemon-reload
service logstash restart