Logstash停止{：plugin=>“LogStash：：Input：：Http”}

Question

我试图在EC2 Ubuntu实例中运行Logstash，

但当我跑的时候

logstash-5.2.0/bin/logstash -f logstash.conf --debug

我得到：

Starting puma
Trying to start WebServer {:port=>9600}
 start
 Trying to start WebServer {:port=>9601}
[api-service] start
Successfully started Logstash API endpoint {:port=>9601}
PeriodicPoller: Stopping
 stopping pipeline {:id=>"main"}
Closing inputs
stopping {:plugin=>"LogStash::Inputs::Http"}
 Closed inputs

我是logstash.conf

   input 
    {
      http 
      {
        host => "127.0.0.1"
        port => 31311
      }
    }

output

    {
        elasticsearch
        {
            hosts => ["localhost:9200"]
        }

        stdout
        {
            codec => rubydebug
        }
    }

当我跑的时候

curl 'http://localhost:9200/?pretty'

我得到：

{
  "name" : "QrRfI_U",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "LLdvAaAsQSCULTfl_b4xIA",
  "version" : {
    "number" : "5.2.0",
    "build_hash" : "24e05b9",
    "build_date" : "2017-01-24T19:52:35.800Z",
    "build_snapshot" : false,
    "lucene_version" : "6.4.0"
  },
  "tagline" : "You Know, for Search"
}

所以elasticsearch运行良好。

Answer 1

如果您将hosts设置为：

hosts => "localhost" 

并确保上面提到的http端口不绑定到任何其他进程。

如果情况不是这样，那么运行plugin list并检查http-输入插件是否存在。