Logstash-OSS with Opensearch Plugin Failed to Execute Action

OpenDistro
12

Ok, just as an update if anyone else comes across this. My issues with Logstash not starting were caused by three issues that are listed below. @jong Thank you for your assistance, that --config.test_and_exit command helped out alot in my troubleshooting and I wish I would’ve known about it sooner.

  1. Since I was coming from a Logstash-OSS 7.10.2 install, I had ilm_enabled which needs to be removed when using Opensearch’s version of Logstash.

  2. My pipelines.yml file needed the pipeline.output.workers: 1 line removed as it is not an allowed setting.

  3. When starting Logstash, I was specifying the pipelines.yml file using the -f switch which is for specifying individual “pipeline” config files and not meant for pointing to an actual pipelines.yml.

After doing the above three tasks, I created a Systemd service file to start Logstash using Systemd instead of running a command as a non-root user and staying logged into the server til the end of time. The goal is to eventually move over to a Docker deployment making updating/upgrading and general lifecycle maintenance of Opensearch easier.

1 Like