Sending from one logstash to another using TCP -
i'm trying forward events logstash server another. last logstash server should write received logs file
in source logstash i've added:
output { tcp { host => "host" port => port } }
and destination logstash has:
input { tcp { port => port } } output { file { path => "/var/log/project/log" } }
this boot log:
{:timestamp=>"2016-01-15t23:12:30.884000+0100", :message=>"reading config file", :file=>"logstash/agent.rb", :level=>:debug, :line=>"309", :method=>"local_config"} {:timestamp=>"2016-01-15t23:12:31.011000+0100", :message=>"compiled pipeline code:\n @inputs = []\n @filters = []\n @outputs = []\n @periodic_flushers = []\n @shutdown_flushers = []\n\n @input_tcp_1 = plugin(\"input\", \"tcp\", logstash::util.hash_merge_many({ \"port\" => port }))\n\n @inputs << @input_tcp_1\n\n @output_file_2 = plugin(\"output\", \"file\", logstash::util.hash_merge_many({ \"path\" => (\"/var/log/project/log\") }))\n\n @outputs << @output_file_2\n\n def filter_func(event)\n events = [event]\n @logger.debug? && @logger.debug(\"filter received\", :event => event.to_hash)\n events\n end\n def output_func(event)\n @logger.debug? && @logger.debug(\"output received\", :event => event.to_hash)\n @output_file_2.handle(event)\n \n end", :level=>:debug, :file=>"logstash/pipeline.rb", :line=>"29", :method=>"initialize"} {:timestamp=>"2016-01-15t23:12:31.027000+0100", :message=>"plugin not defined in namespace, checking plugin file", :type=>"input", :name=>"tcp", :path=>"logstash/inputs/tcp", :level=>:debug, :file=>"logstash/plugin.rb", :line=>"133", :method=>"lookup"} {:timestamp=>"2016-01-15t23:12:31.070000+0100", :message=>"plugin not defined in namespace, checking plugin file", :type=>"codec", :name=>"line", :path=>"logstash/codecs/line", :level=>:debug, :file=>"logstash/plugin.rb", :line=>"133", :method=>"lookup"} {:timestamp=>"2016-01-15t23:12:31.101000+0100", :message=>"config logstash::codecs::line/@charset = \"utf-8\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.120000+0100", :message=>"config logstash::inputs::tcp/@port = 35364", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.127000+0100", :message=>"config logstash::inputs::tcp/@debug = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.135000+0100", :message=>"config logstash::inputs::tcp/@codec = <logstash::codecs::line charset=>\"utf-8\">", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.138000+0100", :message=>"config logstash::inputs::tcp/@add_field = {}", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.146000+0100", :message=>"config logstash::inputs::tcp/@host = \"0.0.0.0\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.154000+0100", :message=>"config logstash::inputs::tcp/@data_timeout = -1", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.162000+0100", :message=>"config logstash::inputs::tcp/@mode = \"server\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.169000+0100", :message=>"config logstash::inputs::tcp/@ssl_enable = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.172000+0100", :message=>"config logstash::inputs::tcp/@ssl_verify = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.175000+0100", :message=>"config logstash::inputs::tcp/@ssl_key_passphrase = <password>", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.179000+0100", :message=>"plugin not defined in namespace, checking plugin file", :type=>"output", :name=>"file", :path=>"logstash/outputs/file", :level=>:debug, :file=>"logstash/plugin.rb", :line=>"133", :method=>"lookup"} {:timestamp=>"2016-01-15t23:12:31.219000+0100", :message=>"plugin not defined in namespace, checking plugin file", :type=>"codec", :name=>"plain", :path=>"logstash/codecs/plain", :level=>:debug, :file=>"logstash/plugin.rb", :line=>"133", :method=>"lookup"} {:timestamp=>"2016-01-15t23:12:31.246000+0100", :message=>"config logstash::codecs::plain/@charset = \"utf-8\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.263000+0100", :message=>"config logstash::outputs::file/@path = \"/var/log/project/log\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.269000+0100", :message=>"config logstash::outputs::file/@type = \"\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.281000+0100", :message=>"config logstash::outputs::file/@tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.284000+0100", :message=>"config logstash::outputs::file/@exclude_tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.297000+0100", :message=>"config logstash::outputs::file/@codec = <logstash::codecs::plain charset=>\"utf-8\">", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.309000+0100", :message=>"config logstash::outputs::file/@workers = 1", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.312000+0100", :message=>"config logstash::outputs::file/@flush_interval = 2", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.331000+0100", :message=>"config logstash::outputs::file/@gzip = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.334000+0100", :message=>"config logstash::outputs::file/@filename_failure = \"_filepath_failures\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"} {:timestamp=>"2016-01-15t23:12:31.364000+0100", :message=>"starting tcp input listener", :address=>"0.0.0.0:35364", :level=>:info, :file=>"logstash/inputs/tcp.rb", :line=>"92", :method=>"register"} {:timestamp=>"2016-01-15t23:12:31.425000+0100", :message=>"pipeline started", :level=>:info, :file=>"logstash/pipeline.rb", :line=>"87", :method=>"run"} {:timestamp=>"2016-01-15t23:13:53.014000+0100", :message=>"accepted connection", :client=>"xx.xx.xx.xx:51272", :server=>"0.0.0.0:port", :level=>:debug, :file=>"logstash/inputs/tcp.rb", :line=>"146", :method=>"client_thread"} {:timestamp=>"2016-01-15t23:13:53.025000+0100", :message=>"config logstash::codecs::line/@charset = \"utf-8\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"111", :method=>"config_init"}
i can see connection between client , server using netstat
, packets containing events tcpdump
. /var/log/project
owned logstash user.
however, no file created, no file written, no log that
i'm not sure if issue tcp or else switching tcp lumberjack input , output worked perfectly
Comments
Post a Comment