Page 1 of 1
Logstash loglevel
Posted: Tue May 19, 2020 4:36 am
by BDRThermea
Hi,
Is it possible to tweak the loglevel of Logstash to figure out a bug in our infrastructure.
I'd like to gain insights into how a messages is received in Logstash and then forwarded to ElasticSearch.
Thanks,
Rick
Re: Logstash loglevel
Posted: Tue May 19, 2020 2:09 pm
by cdienger
Debug logging can be enabled with the following steps:
1. Edit /etc/init.d/logstash and change line 64 from:
DAEMON_OPTS="agent -f ${LS_CONF_DIR} -l ${LS_LOG_FILE} ${LS_OPTS}"
to:
DAEMON_OPTS="agent -f ${LS_CONF_DIR} -l ${LS_LOG_FILE} ${LS_OPTS} --debug"
2. Restart the service logstash with:
systemctl daemon-reload
service logstash restart
This increases the logging in /var/log/logstash/logstash.log. It can generate A LOT of data so you only want to enable this for short periods of time - just long enough to reproduce the behavior - and then revert the changes.
Re: Logstash loglevel
Posted: Wed May 20, 2020 2:07 am
by BDRThermea
Thanks, for your reply.
Re: Logstash loglevel
Posted: Wed May 20, 2020 7:42 am
by scottwilkerson
BDRThermea wrote:Thanks, for your reply.
No problem, let us know if you have any difficulty