0:02 AM
shadowt joined the channel
0:03 AM
shadowt
Hey, is there any way to install a plugin on 5.0 behind a proxy? I just run with http_proxy set and it does use the proxy but then fails with:
0:03 AM
Installing translate
0:03 AM
Error Bundler::InstallError, retrying 1/10
0:03 AM
An error occurred while installing logstash-core-event-java (5.0.0), and Bundler cannot continue.
0:03 AM
Make sure that `gem install logstash-core-event-java -v '5.0.0'` succeeds before bundling.
0:04 AM
this is a fresh logstash 5.0.0 install
0:04 AM
Mixologi- joined the channel
0:05 AM
choffee has quit
0:05 AM
Mixologic_ has quit
0:07 AM
Spanktar has quit
0:10 AM
finalbeta has quit
0:12 AM
ahrs has quit
0:17 AM
fatdragon has quit
0:18 AM
g0aliath has quit
0:18 AM
alsochris joined the channel
0:19 AM
dhollinger has quit
0:19 AM
lexAngeles joined the channel
0:21 AM
dhollinger joined the channel
0:22 AM
lexAngeles has quit
0:25 AM
g0aliath joined the channel
0:32 AM
flowstate joined the channel
0:35 AM
MidlandTroy has quit
0:36 AM
flowstate has quit
0:37 AM
yardenbar has quit
0:51 AM
shog
shadowt: there is, but it's ultra tricky as offline plugin installation is completely broken. one moment.
0:53 AM
0:53 AM
logstashbot
0:57 AM
alsochris has quit
0:59 AM
fev3r101 joined the channel
1:02 AM
spuder joined the channel
1:02 AM
fearnothing has quit
1:04 AM
mxhob1 joined the channel
1:07 AM
KHaderach_ joined the channel
1:07 AM
fev3r101 has quit
1:08 AM
frots has quit
1:09 AM
franks2 has quit
1:10 AM
KHaderach has quit
1:12 AM
franks2 joined the channel
1:12 AM
frots joined the channel
1:16 AM
akurniawan joined the channel
1:20 AM
shannon_ joined the channel
1:32 AM
neersighted has quit
1:40 AM
choffee joined the channel
1:40 AM
spuder has quit
1:41 AM
g0aliath has quit
1:41 AM
alsochris joined the channel
1:44 AM
KHaderach joined the channel
1:45 AM
flowstate joined the channel
1:45 AM
akurniawan has quit
1:45 AM
KHaderach_ has quit
1:47 AM
shannon_ has quit
1:49 AM
flowstate has quit
1:51 AM
benmn joined the channel
1:55 AM
shannon_ joined the channel
1:57 AM
akurniawan joined the channel
1:59 AM
valeech_ joined the channel
1:59 AM
valeech has quit
1:59 AM
valeech_ is now known as valeech
2:00 AM
shannon_ has quit
2:06 AM
rastro has quit
2:13 AM
choffee has quit
2:17 AM
fatdragon joined the channel
2:19 AM
KHaderach_ joined the channel
2:20 AM
fatdragon has quit
2:21 AM
fatdragon joined the channel
2:21 AM
KHaderach has quit
2:21 AM
derjohn_mobi joined the channel
2:23 AM
dalvin has quit
2:25 AM
fatdragon has quit
2:25 AM
derjohn_mob has quit
2:28 AM
finalbeta joined the channel
2:31 AM
fatdragon joined the channel
2:34 AM
iob has quit
2:41 AM
flowstate joined the channel
2:45 AM
flowstate has quit
2:52 AM
choffee joined the channel
2:56 AM
g0aliath joined the channel
2:57 AM
eeddee joined the channel
2:57 AM
shannon_ joined the channel
2:58 AM
gregoryo joined the channel
3:00 AM
g0aliath has quit
3:01 AM
shannon_ has quit
3:03 AM
eeddee has quit
3:10 AM
gregoryo
I've been using filebeat and 'index => "logstash-%{type}-%{+YYYY.ww}"' in logstash.conf, and now looking at using metricbeat as well. The doco says to use 'index =>
"%{[@metadata][beat]}-%{+YYYY.MM.dd}"' ;, which would clearly clash with the existing use. Can someone suggest a compatible way to start using metricbeat?
3:12 AM
I guess one solution would be to change metricbeat.template.json to '"template": "metricset-*"'
3:15 AM
gladheateher
I have problem withe geoip and geo_point mapping. I defanetly make everything right, but still.
3:16 AM
"geo": {
3:16 AM
"properties":{
3:16 AM
"location":{
3:16 AM
"type": "geo_point"
3:16 AM
}
3:16 AM
}
3:16 AM
}
3:16 AM
I'm using this in my template
3:16 AM
target => [ "[destination][host][geo]" ]
3:16 AM
fields => [ "location" ]
3:16 AM
and this in geoip filter and having
3:17 AM
{"type"=>"parse_exception", "reason"=>"geo_point expected"}
3:20 AM
spuder joined the channel
3:23 AM
iob joined the channel
3:28 AM
jydc has quit
3:38 AM
jydc joined the channel
3:40 AM
flowstate joined the channel
3:43 AM
pawnbox joined the channel
3:44 AM
flowstate has quit
3:53 AM
jbehrends joined the channel
4:10 AM
alsochris has quit
4:20 AM
gregoryo
4:20 AM
logstashbot
4:26 AM
ninjada_ joined the channel
4:32 AM
yardenbar joined the channel
4:40 AM
yardenbar has quit
4:41 AM
flowstate joined the channel
4:45 AM
flowstate has quit
4:57 AM
derjohn_mobi has quit
4:58 AM
cray is now known as Guest47333
4:58 AM
shannon_ joined the channel
4:58 AM
yardenbar joined the channel
5:00 AM
derjohn_mob joined the channel
5:03 AM
shannon_ has quit
5:07 AM
derjohn_mob has quit
5:22 AM
yardenbar has quit
5:24 AM
gokuls
hi why do i get permission denied for few files. when files with similar permission are been processed
5:25 AM
spuder has quit
5:26 AM
jbehrends has quit
5:26 AM
bmahe joined the channel
5:39 AM
flowstate joined the channel
5:44 AM
spuder joined the channel
5:44 AM
flowstate has quit
5:59 AM
spuder has quit
6:01 AM
fatdragon has quit
6:01 AM
shannon_ joined the channel
6:03 AM
ninjada_ has quit
6:05 AM
shannon_ has quit
6:16 AM
dhollinger has quit
6:21 AM
vangap joined the channel
6:33 AM
cyborg-one joined the channel
6:34 AM
Sharebear joined the channel
6:36 AM
Sandcrab joined the channel
6:39 AM
flowstate joined the channel
6:41 AM
dhollinger joined the channel
6:41 AM
g0aliath joined the channel
6:44 AM
flowstate has quit
6:44 AM
wedgie
gokuls: what are the permissions on the file and what user is logstash running as?
6:46 AM
gokuls
wedgie, It has read permission for logstash
6:46 AM
g0aliath has quit
6:46 AM
wedgie
gokuls: apparently not.
6:47 AM
gokuls
wedgie: for instance the file is accessed by apache also so i permission is "-rw-r--r-- 1 www-data logstash"
6:48 AM
wedgie: but few files with similar permission are been parsed