Configure Elasticsearch, Kibana 5, Logstash with http input

Question

I am trying to install the ELK stack in the last couples of days but unfortunately I could not get it to work.

The steps that I've done:

installing Elasticsearch with X-pack.
installing Kibana 5 with X-pack.

kibana.yml:

server.port: 5601
elasticsearch.url: "http://localhost:9200"

installing logstash, created logstash.conf under conf.d.

logstash.yml:

xpack.monitoring.enabled: false
path.logs: /var/log/logstash

conf.d/logstash.conf:

input {
    http {
           host => "127.0.0.1"
           port => 4000
   }
}

output {
    elasticsearch {

            host => "localhost:9200"
            protocol => "http"
            user => "*****"
            password => "*******"
    }
}

I can connect to kibana well, elasticsearch seems to work but the logstash is not give me any feedback for receiving posts. I try to post some data to the logstash via postman and i get connection refused.

I've double checked the security group and they are fine.

in the kibana i need to configure an index pattern, i am trying to choose logstash-* but it keep saying unable to fetch mapping, so i think that elasticsearch is empty.

Last year i installed elasticsearch 1.7 with kibana 4 and logstash with http plugin and with the same configurations and when i posted to it it returned 'ok'.

what am i missing here?

You can see what indices exist in you elasticsearch by going to :9200/_cat/indices — Will Barnwell, Apr 12 '17 at 13:58
There are no logstash indices: yellow open index 8OTxvTswTxC_1tmAbjkqXg 5 1 1 0 3.9kb 3.9kb yellow open .kibana N0l2aTOQQDC8qWAvYE2MPw 1 1 1 0 3.2kb 3.2kb — Yanay Hollander, Apr 18 '17 at 12:01
so logs are not making it to elasticsearch, evidenced by the lack of a logstash index — Will Barnwell, Apr 19 '17 at 13:50

score 0 · Answer 1 · answered Apr 10 '17 at 16:57

0

Try using host => "0.0.0.0" instead of 127.0.0.1.

0.0.0.0 is the default value and should accept local posts.

answered Apr 10 '17 at 16:57

Will Barnwell

4,049
21
34

I get the same result of "connection refused" – Yanay Hollander Apr 12 '17 at 12:35

Configure Elasticsearch, Kibana 5, Logstash with http input

1 Answers1