Logstash索引模式不起作用

时间:2015-12-20 00:37:54

标签: logstash logstash-configuration

我在配置logstash时遇到问题。 每当我尝试启动logstash时,我都会收到此

message=>"SIGTERM received. Shutting down the pipeline.", :level=>:warn

这是我的配置

input {
  file {
    path => "/var/logs/Xorg.0.log"
    start_position => beginning
  }
}
output {
  elasticsearch { host => localhost }
}

Logstash-转发

{
    "network": {

        "servers": ["localhost:5043"],
 "ssl ca": "/etc/pki/tls/certs/logstash-forwarder.crt",
    "timeout": 15

    },

    "files": [{
        "paths": [

            "/var/log/syslog",
            "/var/log/auth.log",
            "/var/log/*.log"
        ],

        "fields": {
            "type": "syslog"
        }
    }, {
        "paths": ["-"],
        "fields": {
            "type": "stdin"
        }
    }, {
        "paths": [
            "/var/log/apache/httpd-*.log"
        ],
        "fields": {
            "type": "apache"
        }
    }]
}

任何帮助都会很棒

0 个答案:

没有答案