API tools faq
paste
Guest User

Logstash Logs

a guest
Jun 20th, 2019
168
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 8.01 KB | None | 0 0
raw download clone embed print report
  1. WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults
  2. Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
  3. [WARN ] 2019-06-19 14:42:35.416 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified
  4. [INFO ] 2019-06-19 14:42:35.447 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=>"7.1.1"}
  5. [INFO ] 2019-06-19 14:42:48.249 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://10.200.26.185:9200/]}}
  6. [WARN ] 2019-06-19 14:42:49.280 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"http://10.200.26.185:9200/"}
  7. [INFO ] 2019-06-19 14:42:49.841 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7}
  8. [WARN ] 2019-06-19 14:42:49.848 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7}
  9. [INFO ] 2019-06-19 14:42:49.919 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//10.200.26.185:9200"]}
  10. [INFO ] 2019-06-19 14:42:49.967 [Ruby-0-Thread-5: :1] elasticsearch - Using default mapping template
  11. [INFO ] 2019-06-19 14:42:50.823 [Ruby-0-Thread-5: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1, "index.lifecycle.name"=>"logstash-policy", "index.lifecycle.rollover_alias"=>"logstash"}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}
  12. [INFO ] 2019-06-19 14:42:50.965 [Ruby-0-Thread-5: :1] elasticsearch - Installing elasticsearch template to _template/logstash
  13. [INFO ] 2019-06-19 14:42:51.008 [[main]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-6.0.1-java/vendor/GeoLite2-City.mmdb"}
  14. [INFO ] 2019-06-19 14:42:51.303 [[main]-pipeline-manager] javapipeline - Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>125, :thread=>"#<Thread:0x57c39681 run>"}
  15. [INFO ] 2019-06-19 14:42:51.636 [Ruby-0-Thread-5: :1] elasticsearch - Creating rollover alias <logstash-{now/d}-000001>
  16. [INFO ] 2019-06-19 14:42:53.050 [Ruby-0-Thread-5: :1] elasticsearch - Installing ILM policy {"policy"=>{"phases"=>{"hot"=>{"actions"=>{"rollover"=>{"max_size"=>"50gb", "max_age"=>"30d"}}}}}} to _ilm/policy/logstash-policy
  17. [INFO ] 2019-06-19 14:42:53.312 [[main]-pipeline-manager] beats - Beats inputs: Starting input listener {:address=>"0.0.0.0:5044"}
  18. [INFO ] 2019-06-19 14:42:53.569 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=>"main"}
  19. [INFO ] 2019-06-19 14:42:54.014 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] agent - Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
  20. [INFO ] 2019-06-19 14:42:54.183 [[main]<beats] Server - Starting server on port: 5044
  21. [INFO ] 2019-06-19 14:42:54.965 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600}
  22. ^C[WARN ] 2019-06-19 15:25:38.166 [SIGINT handler] runner - SIGINT received. Shutting down.
  23. [INFO ] 2019-06-19 15:25:42.897 [Converge PipelineAction::Stop<main>] javapipeline - Pipeline terminated {"pipeline.id"=>"main"}
  24. [WARN ] 2019-06-19 15:25:43.186 [Ruby-0-Thread-14: :1] runner - Received shutdown signal, but pipeline is still waiting for in-flight events
  25. to be processed. Sending another ^C will force quit Logstash, but this may cause
  26. data loss.
  27. [INFO ] 2019-06-19 15:25:43.692 [LogStash::Runner] runner - Logstash shut down.
  28. [root@localhost logstash]# bin/logstash -f /etc/logstash/conf.d/first-pipeline.conf --config.reload.automatic
  29. WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults
  30. Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
  31. [WARN ] 2019-06-20 09:21:45.242 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified
  32. [INFO ] 2019-06-20 09:21:45.326 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=>"7.1.1"}
  33. [INFO ] 2019-06-20 09:22:00.548 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://10.200.26.185:9200/]}}
  34. [WARN ] 2019-06-20 09:22:01.106 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"http://10.200.26.185:9200/"}
  35. [INFO ] 2019-06-20 09:22:01.553 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7}
  36. [WARN ] 2019-06-20 09:22:01.559 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7}
  37. [INFO ] 2019-06-20 09:22:01.628 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//10.200.26.185:9200"]}
  38. [INFO ] 2019-06-20 09:22:01.683 [Ruby-0-Thread-5: :1] elasticsearch - Using default mapping template
  39. [INFO ] 2019-06-20 09:22:01.974 [Ruby-0-Thread-5: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1, "index.lifecycle.name"=>"logstash-policy", "index.lifecycle.rollover_alias"=>"logstash"}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}
  40. [INFO ] 2019-06-20 09:22:02.487 [[main]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-6.0.1-java/vendor/GeoLite2-City.mmdb"}
  41. [INFO ] 2019-06-20 09:22:02.666 [[main]-pipeline-manager] javapipeline - Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>125, :thread=>"#<Thread:0x564f0a0b run>"}
  42. [INFO ] 2019-06-20 09:22:03.993 [[main]-pipeline-manager] beats - Beats inputs: Starting input listener {:address=>"0.0.0.0:5044"}
  43. [INFO ] 2019-06-20 09:22:04.119 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=>"main"}
  44. [INFO ] 2019-06-20 09:22:04.352 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] agent - Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
  45. [INFO ] 2019-06-20 09:22:04.511 [[main]<beats] Server - Starting server on port: 5044
  46. [INFO ] 2019-06-20 09:22:05.317 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600}
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!