#logstash

hey guys

allah is doing

sun is not doing allah is doing

to accept Islam say that i bear witness that there is no deity worthy of worship except Allah and Muhammad peace be upon him is his slave and messenger

i just tried to install logstash 5.3 with apt-get (https://www.elastic.co/guide/en/logstash/curren...), ran a bin/logstash -e, but there is no output. nothing happens. any ideas?

<http://tinyurl.com/jal4eta>; (at www.elastic.co)

Mons_ it's probably waiting for input

well, it's supposed to print Pipeline main started, and after whatever i write after that, it returns the output with the time

so it's started :)

follow that monkey

can someone help me please in a grok problem?

Title: Paste ofCode (at paste.ofcode.org)

hi guys, can someone explain to me how to use the syslog plugin to parse syslogs with logstash? i didnt understand the explenation here https://www.elastic.co/guide/en/logstash/curren...

<http://tinyurl.com/k8scwvb>; (at www.elastic.co)

Sahar: You don't use the *input* plugin for parsing. Input is for receiving.

Sahar: Try https://www.elastic.co/guide/en/logstash/curren... instead.

<http://tinyurl.com/qgkhbt7>; (at www.elastic.co)

oh, got it , thanks!

can someone help me please in a grok problem?

Title: Paste ofCode (at paste.ofcode.org)

OS-26905: Did you test them in http://grokdebug.herokuapp.com/ ?

Title: Grok Debugger (at grokdebug.herokuapp.com)

sure but it's on start

ls doesn't start

Does logstash start without those pattern?

no then shows other Pattern

?

OS-26905: What's the question mark at the end supposed to do?

after the error pipe down

I don't understand you, sorry.

if i comment out the configuration for this pattern and this log, then i get the same error but in other place in config with sutch a Patter which was ok in a first case

OK, so the error can be somewhere else then.

Do you have many config files?

yes tooo many, but it's strange because the config doesn't have syntax error

have any of you guys exported index's with elasticdump?

oh sry i forgot this is a logstash irc