验证Logstash配置

Question

我正在尝试验证我的logstash配置。

使用：

sudo -u logstash /usr/share/logstash/bin/logstash --path.settings -t -f /etc/logstash/conf.d

我收到以下错误：

penJDK 64位服务器VM警告:如果预期处理器数量将从一个增加，则应该使用-XX:ParallelGCThreads=N警告适当地配置并行GC线程数:无法找到通常位于$LS_HOME/config或/etc/logstash中的logstash.yml。可以使用--路径设置指定路径。继续使用默认设置无法在路径/tmp/hsperfdata_logstash/-t/log4j2.properties.中找到log4j2配置使用默认配置将错误记录到控制台信息2018-10-09 14:56:50.240主支架-初始化模块{:module_name=>"fb_apache"，：module_name=> INFO 2018-10-09 14:56:50.265主支架-初始化模块{:module_name=>"netflow"，:directory=>"/usr/share/logstash/modules/netflow/configuration"}信息2018-10-09 14:56:50.378主可写目录-创建目录{:setting=>"path.queue"，:path=>"/usr/share/logstash/data/queue"} INFO 2018-10-09 14:56:50.380主可写目录-创建目录{:setting=>"path.dead_letter_queue"，:path=>"/usr/share/logstash/data/dead_letter_queue"}警告2018-10-09 14:56:51.099 LogStash::Runner忽略'pipelines.yml‘文件，因为模块或命令行选项被指定为信息2018-10-09 14:56:51.126 LogStash::Runner代理-没有找到持久的UUID文件。生成新的UUID {:uuid=>"80207611-d5b8-47dd-b229-23c2ade385ae"，:path=>"/usr/share/ Logstash /data/uuid"} INFO 2018-10-09 14:56:51.568 LogStash::Runner -share {"logstash.version"=>"6.2.4"} INFO 2018-10-09 14:56:52.021 Api Webserver代理-成功启动Logstash端点{:port=>9600} 2018-10-09 14:56:53.586 -0-线程-1:/usr/共享/logstash/供应商/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:22拍-对B拍输入插件的无效设置： 输入{#此设置必须是路径#文件不存在或不能打开/etc/pki/tls/certs/logstash-transder.crt ssl_certificate =>“/etc/pki/tls/certs/logstash-transder.crt”.} ERROR 2018-10-09 14:56:53.588 Ruby-0-Thread-1: /usr/share/logstash/供应商/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:22拍-对B拍输入插件的无效设置： 输入{#此设置必须是路径#文件不存在或不能打开/etc/pki/tls/私有/logstash-transder.key ssl_key =>“/etc/pki/tls/私有/logash-transder.key”.} ERROR 2018-10-09 14:56:53.644 Ruby-0-Thread-1: /usr/share/logstash/=>/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:22代理-未能执行操作{:action=>LogStash::PipelineAction::Create/pipeline_id:main，:backtrace=>"/usr/share/logstash/logstash-core/lib/logstash/config/mixin.rb:89:in“LogStash：：ConfigurationError”，：message=>“您的配置出了问题”，：exception=> config_init'", "/usr/share/logstash/logstash-core/lib/logstash/inputs/base.rb:62:in初始化‘，"/usr/share/logstash/logstash-core/lib/logstash/plugins/plugin_factory.rb:89:in plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:112:in plugin'"，“(config_init'", "/usr/share/logstash/logstash-core/lib/logstash/inputs/base.rb:62:in)：8:in <eval>'", "org/jruby/RubyKernel.java:994:in config_init'", "/usr/share/logstash/logstash-core/lib/logstash/inputs/base.rb:62:in’”，"/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:84:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:169:in初始化‘“，"/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:315:in块in converge_state’，"/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in with_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:312:in块在converge_state‘中”，"org/jruby/RubyArray.java:1734:in each'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:299:in converge_state'"，"/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:in block in converge_state_and_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in with_pipelines‘，“/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:in converge_state_and_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:90:in execute’，"/usr/share/logstash/logstash-core/lib/logstash/runner.rb:348:in block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in块在初始化‘’}

如果能帮忙，我会很感激的。

Answer 1

请检查/etc/logstash上可用的logstash.yml文件？如果可用，停止logstash服务，如果有进程破坏后台，则终止。将您的配置文件保存在/etc/logstash/con.d/youfile.conf上。要运行配置测试，转到logstash目录并运行

./logstash -f /etc/logstash/conf.d/your_config_file.conf --config.test_and_exit