Having problems setting up Logstash

Question

I've succesfully been able to set up Elasticsearch, Kibana etc and when I run: 'sudo systemctl status elasticsearch' it is all running fine.

However, when I execute 'sudo systemctl status logstash' this is the output:

It fails to start logstash, I've read numerous articles online saying it's something to do with path or config perhaps but I've had no luck finding a correct working solution.

I have JDK downloaded and followed the guide on the logstash documentation site so I'm unsure to as why logstash is not being allowed to run.

This is the output when I try to find out the logstash version.

Answer 1

The error message is

No configuration found in the configured sources

This means that you don't have any pipeline configuration in /etc/logstash/conf.d that Logstash can run, so it stops.

Answer 2

run logstash, logstash will read pipelines.yml to find your conf location

1. Logstash will find your .conf file from pipelines.yml . By default it will looking at /etc/logstash/conf.d/ as pipelines.yml show. You have to move your configuration file to the path so logstash could find it.

2. or you want to run with specified file with it will ignore the pipeline.yml so logstash will directly go into your .conf /usr/share/logstash/bin/logstash -f yourconf.conf

I will suggest you to do 1. but 2 is good for debugging your configuration file.