Question

这是我的配置文件存储在/ etc / logstash / conf

input
{
file{
path => ["PATH_OF_FILE"]
}
}

output
{
elasticsearch
{
host => "172.29.86.35"
index => "new"
}
}

这是我的elasticsearch.yaml文件内容，用于网络和http

\# Set the bind address specifically (IPv4 or IPv6):

\#network.bind_host: 172.29.86.35

\# Set the address other nodes will use to communicate with this node. If not
\# set, it is automatically derived. It must point to an actual IP address.
\#network.publish_host: 192.168.0.1

\# Set both 'bind_host' and 'publish_host':
network.host: 172.29.86.35

\# Set a custom port for the node to node communication (9300 by default):
\#transport.tcp.port: 9300

\# Enable compression for all communication between nodes (disabled by default):

\#transport.tcp.compress: true

\# Set a custom port to listen for HTTP traffic:
\#http.port: 9200

我正在运行elasticsearch和logstash作为服务。问题是当我将日志存储作为服务启动时，它不会向elasticsearch发送任何数据。但是，如果我在logstash conf文件中使用相同的配置并从CLI运行logstash，则它可以正常工作。即使是日志也不会显示任何错误。

我运行的版本是ES为1.4.3，LS为1.4.2。系统环境是RHEL 7

当作为服务运行时，Logstash不会将数据发送到弹性搜索

0 个答案: