I am new to ELK and am having problems running logstash. I started logatash as indicated in the link below.
https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html
But when starting filebeat and logstash, its show logstash starts successfully on port 9600. In filebeat it gives like this
INFO No non-zero values in the last 30 seconds
Logstash does not receive input from filebeat. Please, help..
filebeat.yml
filebeat.prospectors:
- input_type: log
paths:
- /path/to/file/logstash-tutorial.log
output.logstash:
hosts: ["localhost:5043"]
and I ran this command sudo./filebeat -e -c filebeat.yml -d "publish"
Configuration file
input {
beats {
port => "5043"
}
}
output {
stdout { codec => rubydebug }
}
then executed the commands
1)bin/logstash -f first-pipeline.conf
2)bin/logstash -f first-pipeline.conf
I could not continue after this, since filebeat gives INFO
INFO No non-zero values in the last 30 seconds
And the used version of ELK is 5.1.2