#logstash

You mean subdirectories?

I would like to split filters based on BU including filters based on if then else

All files in conf.d will be read in the operating system's regular order, so you can sort them alphanumerically.

ok, if i use subdirectoryes will work at the same manner?

Like 00-filter-00-beats.conf, 00-input-01-syslog.conf, 01-filter-00-syslog.conf etc

I don't think Logstash supports recursive conf.d

like conf.d/01-inputs/01-input.conf conf.d/01-inputs/02-input.conf conf.d/02-filters/01-filter.conf conf.d/02-filters/02-filter.conf won't work

As far as I know, it won't work.

ok

it can but you should trick it with wildcards

Hi guys! im getting crazy trying to make work logstash with influxdb, can anyone spare me some minutes to help? :)

Gotxi: Explain the issues and perhaps someone can help

Sure! this is my scenario -> collectd -> rabbitmq -> logstash -> influxdb, and im not getting any queries done on influxdb. The output plugin on influx is installed, but logstash crashes and shows me this on the log:

[2017-09-28T08:21:06,602][ERROR][logstash.plugins.registry] Problems loading a plugin with {:type=>"output", :name=>"influxdb", :path=>"logstash/outputs/influxdb", :error_message=>"NameError", :error_class=>NameError, :error_backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:226:in `namespace_lookup'", "/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:162:in `legacy_lookup'", "/usr/share/

it seems it cannot load influxdb output plugin?

You were cut off, try using a pastebin

ouch

Couldn't find any output plugin named 'influxdb'. Are you sure this is correct? <- That's quite a giveaway

but why it shows as correctly installed when doing bin/logstash-plugin list? its there

i have used bin/logstash-plugin install logstash-output-influxdb

Could you show that output in a pastebin?

sure

Looks like it's not properly registered

any way to force it?

I don't have any great ideas, perhaps someone else has

No errors during install?

nope, everything was smooth

[root@nlglogstashmon /]# /usr/share/logstash/bin/logstash-plugin install logstash-output-influxdb Validating logstash-output-influxdb Installing logstash-output-influxdb Installation successful

i will reinstall again everything from scratch

im out of ideas

installing form scrach worked fine, now im getting 400 error on influxdb, but that is another thing

ok, this time logstash log says "bad timestamp": https://pastebin.com/kKyauUH4

why? :o

"unable to parse"

should i use a date filter?

well... i will investigate that way

thanks :)

Hello

I need your help on a log I try to grok, fields are all separated by @ but some of them can be empty and I can't grok all the fields (more than 50 fields ) without to reach timeout

I use DATA pattern but it consume many time

Hi, is it possible to run logstash behind a reverse proxy (nginx)?