将日志从 logstash-forwarder 推送到 logstash

Question

我无法将日志从 logstash-forwarder 推送到 logstash 这是我的 logstash-forwarder.conf

{ "network":{
 "servers": [ "logstash_server_private_address:5000" ],
    "timeout": 15,
    "ssl ca": "/etc/pki/tls/certs/logstash-forwarder.crt"
},
"files":[

{
      "paths": [
        "/var/log/syslog",
        "/var/log/auth.log"
       ],
      "fields": { "type": "syslog" }
    }
]
}

同时运行遵循命令

$ /opt/logstash-forwarder/bin/logstash-forwarder -config /etc/↩
logstash-forwarder/logstash-forwarder.conf

我遇到以下异常...

Failed unmarshalling json: invalid character '\x00' looking for beginning of value.  Could not load config file /etc/NetworkManager invalid character '\x00' looking for beginning of value

Answer 1

现在可以使用了:-

bin/logstash-forwarder -config /etc/logstash-forwarder.conf

将日志从 logstash-forwarder 推送到 logstash

push log from logstash-forwarder to logstash

logstash

logstash-forwarder