Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Opensearch-2.17.1
Logstash-8.15.2
Describe the issue:
I config Logstash as usual and use the command ./bin/logstash -f /etc/logstash/pipelines.yml to run Logstash, but it shows this error:
Although I have installed and ran Logstash twice in the past and I use the same kind of configuration, but this time this error persists. Reading the logs I think the problem is in the pipelines.yml, but I cant figure out how to solve it
Configuration:
-------------------pipelines.yml--------------------
-------------------/conf.d/1-input.conf:--------------------
-------------------/conf.d/2-filter.conf:--------------------
-------------------/conf.d/3-output.conf:--------------------
output {
if [agent][type] == “auditbeat” {
opensearch {
hosts => [“https://localhost:9200”]
index => “auditbeat-%{+YYYY.MM.dd}”
user => “admin”
password => “X”
ssl => true
ssl_certificate_verification => false
}
} else if [service][type] == “apache” {
opensearch {
hosts => [“https://localhost:9200”]
index => “filebeat-%{+YYYY.MM.dd}”
user => “admin”
password => “X”
ssl => true
ssl_certificate_verification => false
}
} else if [agent][type] == “winlogbeat” {
opensearch {
hosts => [“https://localhost:9200”]
index => “winlogbeat-%{+YYYY.MM.dd}”
user => “admin”
password => “X”
ssl => true
ssl_certificate_verification => false
}
} else if [agent][type] == “metricbeat” {
opensearch {
hosts => [“https://localhost:9200”]
index => “metricbeat-%{+YYYY.MM.dd}”
user => “admin”
password => “X”
ssl => true
ssl_certificate_verification => false
}
}
}