Hi Team,
I have been using logstash to ingest the logs to opensearch from my linux DNS server, now my requirement is I wanted to ingest the logs via filebeat → logstash → opensearch.
Unfortunately that is not working and I really appreciate if someone can help me on this?
These are my settings and let me know if I am doing anything wrong?
filebeat.inputs:
- type: log
enabled: true
paths:
- /var/lib/bind/rpz.log
- /var/lib/bind/queries.log
And logstash here is the settings
input {
beats {
port => 5044
}
}
output {
opensearch {
hosts => ["https://127.0.0.1:16577"]
user => admin
password => admin
ssl => true
ssl_certificate_verification => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}"
}
}