#logstash

Is it possible to have persistent queues for one pipeline but not another?

one pipeline keeps getting garbage in it and I'd prefer it just disappears if I restart logstash

morning

Hi all, I just finished upgrading my whole cluster/logstash/kibana/beats to 6.2.4. Upgraded my config mostly as is. Now that all is done and working I was wondering about the new filebeat modules. For instance, I used to have a prospector point at my apache log and then use logstash filter patternHTTPD_COMBINEDLOG. Which still work fine. I was just wondering if it was now better to just use the apache module of filebeat.

For instance, this : https://www.elastic.co/guide/en/logstash/6.2/co... VS https://www.elastic.co/guide/en/logstash/6.2/lo...

Hi all, I asked a question a few minutes ago under Nokio name. Unfortunatly, I got disconnected and if an answer was given I did not say it. Thanks to paste it back if there was indeed an answer.

is there a way to see more recent versions plugin docs, for example https://www.elastic.co/guide/en/logstash/6.2/pl... has v4.0.5 versus the latest releases of 4.1.2

nevermind just read the docs on github

im trying to setup syslog input to elk. i believe data is being received on the listener, but not outputting properly. i am seeing this message roll: [ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>403, :url=>"http://192.168.1.166:9200/_bulk"}

any ideas?

sideone: looks like an authentication failure. Are you using x-pack or a proxy?

x-pack

ill check the output conf

hello

Xylakant; the pw looks fine if i try to auth using curl

mind taking a look at this conf? https://pastebin.com/7WZVqdBG

sideone: did you set up a role for that user?

Why aren’t you using the logstash_system User which is standard built in user for LS?

that is the user that im using, just changed the user/pw for pastebin