直接看文章末尾,前面不要看
使用的是Redhat 7 ,Logstash版本为6.8.0
使用systemctl 命令启动
[root@dycipvr00534 logstash]# systemctl restart logstash.service
WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults
Could not find log4j2 configuration at path /etc/logstash/logstash.conf/log4j2.properties. Using default config which logs errors to the console
ERROR: Failed to read pipelines yaml file. Location: /etc/logstash/logstash.conf/pipelines.yml
可以成功启动,但是读不出Logstash.yml、Logstash.conf 等配置文件;
由于读不出Logstash.yml,所有获取不到日志输出目录;
没有日志,也不知道哪里出的问题
后来发现,需要把Logstash.conf放到 conf.d目录,如下:
[root@dycipvr00534 logstash]# pwd
/etc/logstash
[root@dycipvr00534 logstash]#