Logstash写入Syslog及报错解决

最新推荐文章于 2025-02-18 11:16:04 发布

stpice

最新推荐文章于 2025-02-18 11:16:04 发布

阅读量2.1k

点赞数

分类专栏： elk 文章标签： logstash syslog

原文链接：https://www.codeleading.com/article/82412394485/

版权

elk 专栏收录该内容

4 篇文章

订阅专栏

本文详细介绍如何在Logstash中配置Syslog输出插件，包括解决插件未找到的错误，下载并安装Syslog插件的步骤，以及配置示例。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Logstash写入到Syslog，配置文件可以参考Syslog output plugin官网实现，这里简单写一个例子：

output{
  syslog {
    host => "your host"
    port => 5140
    protocol => "udp"
    codec => plain {
      format => "%{message}"
    }
  }
}

配置完成后，运行Logstash：bin/logstash -f conf.d/logstash.conf，发现运行错误，错误如下所示：

[ERROR][logstash.plugins.registry] Tried to load a plugin's code, but failed. {:exception=>#<LoadError: no such file to load -- logstash/outputs/syslog>, :path=>"logsttputs/syslog", :type=>"output", :name=>"syslog"}
[ERROR][logstash.agent] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::PluginLoadingError", :m=>"Couldn't find any output plugin named 'syslog'. Are you sure this is correct? Trying to load the syslog output plugin resulted in this error: no such file to load -- logstash/outputs/syslogcktrace=>["/home/test/software/logstash-7.3.1/logstash-core/lib/logstash/plugins/registry.rb:221:in `lookup_pipeline_plugin'", "/home/test/software/logstash-7.3.1/logcore/lib/logstash/plugin.rb:143:in `lookup'", "org/logstash/plugins/PluginFactoryExt.java:203:in `plugin'", "org/logstash/plugins/PluginFactoryExt.java:140:in `buildOutput'", "org/logstash/exe/JavaBasePipelineExt.java:50:in `initialize'", "/home/test/software/logstash-7.3.1/logstash-core/lib/logstash/java_pipeline.rb:24:in `initialize'", "/home/test/softwastash-7.3.1/logstash-core/lib/logstash/pipeline_action/create.rb:36:in `execute'", "/home/test/software/logstash-7.3.1/logstash-core/lib/logstash/agent.rb:325:in `block in converge'"]}

原因在于：Logstash默认是没有Syslog output plugin的，可以使用命令 bin/logstash-plugin list 查看。那么就需要自己安装了，我这里提供一种安装方法（参考：https://blog.youkuaiyun.com/fgf00/article/details/90383884）：

1）下载插件：https://rubygems.org/gems/logstash-output-syslog/versions/3.0.5

2）将下载下来的gem文件放置到指定位置

cd logstash-7.3.1/

mkdir otherPlugin

将gem文件放置到otherPlugin文件夹下

3）zip -r logstash-output-syslog-3.0.5.zip otherPlugin

4）安装：bin/logstash-plugin install file:///logstash-7.3.1/logstash-output-syslog-3.0.5.zip

5）查看列表中是否存在logstash-output-syslog： bin/logstash-plugin list

原文地址：https://www.codeleading.com/article/82412394485/