#logstash

file { 'path' => '/path/to/file'

'path' is no more accepted

it should be path

I've tracked it down to changes of the grammar parser

never tried them as strings. ( didn't know that was possible )

i always assumed path instead of 'path' indeed

but before submitting a PR to allow quoted strings again I would like to be sure it was not intentional

:D

i think its part of making it more logical ( Not allowing it to be a string )

chef-logstash generated config with simple quoted string

that's why I wondering

ah okay :-)

perhaps in the pre 1.2 releases it was possible. but with my puppet module i never assumed that

ok thanks, then I'll change it in chef-logstash instead

okay :-)

hey electrical how you doing? happy?

polaco: heyz :-) defo happy yeah :D

@ ES already? :D

yeah :-)

cool!

first day today :-)

congrats man!

thanks :-)

why does the Amqp plugin change name to RabbitMq, isnt it protocol specefic and shouldnt it also be workable with ActiveMq ?

electrical: im changing too man

im moving!

from the 1st floor to the 8th floor

eblemand: in 1.2.x you mean?

polaco: hehe okay :p

haha

big change ;-)

hahaha btw gotta move my stuff

be back, cya

laterz

ps: have some elasticsearch_http questions, will ask when I am back

electrical: yeah, but still why the change and it will still be compatible with activemq since it use the same protocol? :)

polaco: okay :-)

eblemand: let me double check for you

electrical: https://groups.google.com/forum/#!topic/logstas... this says it all, damn :/

<http://goo.gl/hIkkEp>; (at groups.google.com)

am I correct in that lumberjack cannot output to any format other than it's own? If that is the case, what is the lightest weight shipper that can output to rabbitmq?

eblemand: hmm okay. still not completely clear for me though

msbel: Lumberjack currently only can use the lumberjack protocol indeed.

You could look at beaver ( python ) which should work with rabbitmq

as a python guy I am considering that :) I was just curious if any of the more full-featured ones were known for being lighter

i'll put some beavers in place and see what happens

msbel: okay. i know whack is planning to add amqp/rabbitmq/redis support into lumberjack at some point

might have to use woodchuck instead--beaver requires py2.6

which python version are you running then?

2.4

centos 5 boxes

hehe okay. time to upgrade ;-) lol

production webcluster that i've inherited so I'm anxious about making large changes for now

though I agree completely :)

hehe i can imagine :-)

how about nanomsg?

is there an obvious problem I'm overlooking if I lumberjack to logstash on the rabbitmq box and then input{lumberjack}->output{rabbitmq}

http://nanomsg.org/ looks quite promising

Title: nanomsg (at nanomsg.org)

cnf: hiya bud :-)

hey electrical

msbel: its possible but you do create extra layers then.

derp, nm, python26 is on these systems so I can run w/ beaver--thx for the sounding board :)

your welcome msbel :-)

beaver's awesome

electrical: Its not rabbitMq i got as server but ActiveMq, and it looks like I cant get the organization to change to RabbitMq even if its more used and faster

eblemand: uhg okay.

anyone who uses ActiveMq as input to logstash? :)

eblemand: lusis I believe albeit he's not here

jamesturnbull: ah thanks :) I'll ping him when he's here

SSL Error {:exception=>#<OpenSSL::SSL::SSLError: Received fatal alert: bad_certificate>

does that mean the ca cert is bad or server cert?

chandler1: euhm, not sure.

hmm

do i need to do any special once i have my certs and point to them in the tcp input

ive got ca crt, local server crt, and local server key. no verify turned on

chandler1: what about openssl s_client to debug?

i am trying that now

question about logstash in combination with redis, elasticsearch and kibana3

jaap: fire away :-)

probably a very simple question but i don't seem to fix it. my kibana installation gives me an error

Oops! IndexMissingException[[NO_TIME_FILTER_OR_INDEX_PATTERN_NOT_MATCHED] missing]

i've configured my input and output correctly according to the logstash manual

the logstash and elasticsearch logs dont give me any feedback about this error

jaap: do you have any data in ES at all? you can install the 'head' plugin to see if any data is present in your ES server

nope, trying to install it

i've installed everything through puppet so

ah okay :-)

using my wonderful puppet modules? ;-)

of course ;-)

:D

magical

installing the head plugin is peace of cake ;

ignore link

:-)

how should i check if there is anything in it?

i think there is nothing in it

you should see names of the nodes on the page with indexes.

nope

only captain britain

ah okay.

which output @ ES are you using? native or _http output ?

or can you post your config on pastebin/gist?

Title: ## input_redis_redis-input input { redis { data_type => "list" format - Pastebin.com (at pastebin.com)

okay. ES is running on the same host?

jep

okay

and you see only 1 host in the 'head' plugin?

Redis, NGinx, ES, Kibana and Logstash on the same server

ah okay :-)

i'm only seeing captain britain

on the overview page

hmm, looks like that LS isn't connecting to the ES instance.

could you run logstash manually and with -vv at the end? gives you debugging output

oke, i've also used the puppet module for LS

okay :)