Logstash停止{：插件=> 「LogStash ::輸入:: HTTP」}

Question

我試圖在EC2 Ubuntu的實例上運行Logstash，

但是當我運行：

logstash-5.2.0/bin/logstash -f logstash.conf --debug 

我得到：

Starting puma 
Trying to start WebServer {:port=>9600} 
start 
Trying to start WebServer {:port=>9601} 
[api-service] start 
Successfully started Logstash API endpoint {:port=>9601} 
PeriodicPoller: Stopping 
stopping pipeline {:id=>"main"} 
Closing inputs 
stopping {:plugin=>"LogStash::Inputs::Http"} 
Closed inputs 

這是logstash.conf

input 
    { 
     http 
     { 
     host => "127.0.0.1" 
     port => 31311 
     } 
    } 

output 

    { 
     elasticsearch 
     { 
      hosts => ["localhost:9200"] 
     } 

     stdout 
     { 
      codec => rubydebug 
     } 
    } 

當我運行

curl 'http://localhost:9200/?pretty' 

我得到：

{ 
    "name" : "QrRfI_U", 
    "cluster_name" : "elasticsearch", 
    "cluster_uuid" : "LLdvAaAsQSCULTfl_b4xIA", 
    "version" : { 
    "number" : "5.2.0", 
    "build_hash" : "24e05b9", 
    "build_date" : "2017-01-24T19:52:35.800Z", 
    "build_snapshot" : false, 
    "lucene_version" : "6.4.0" 
    }, 
    "tagline" : "You Know, for Search" 
} 

所以elasticsearch運行良好。

Answer 1

如果你有你的hosts爲：

hosts => "localhost" 

，並確保該http端口您已上面提到的未綁定到任何其他進程。

如果確實不是這種情況，請運行plugin list並檢查是否存在http-input插件。