Logstash停止{：插件=> “LogStash ::输入:: HTTP”}

Question

我试图在EC2 Ubuntu的实例上运行Logstash，

但是当我运行：

logstash-5.2.0/bin/logstash -f logstash.conf --debug 

我得到：

Starting puma 
Trying to start WebServer {:port=>9600} 
start 
Trying to start WebServer {:port=>9601} 
[api-service] start 
Successfully started Logstash API endpoint {:port=>9601} 
PeriodicPoller: Stopping 
stopping pipeline {:id=>"main"} 
Closing inputs 
stopping {:plugin=>"LogStash::Inputs::Http"} 
Closed inputs 

这是logstash.conf

input 
    { 
     http 
     { 
     host => "127.0.0.1" 
     port => 31311 
     } 
    } 

output 

    { 
     elasticsearch 
     { 
      hosts => ["localhost:9200"] 
     } 

     stdout 
     { 
      codec => rubydebug 
     } 
    } 

当我运行

curl 'http://localhost:9200/?pretty' 

我得到：

{ 
    "name" : "QrRfI_U", 
    "cluster_name" : "elasticsearch", 
    "cluster_uuid" : "LLdvAaAsQSCULTfl_b4xIA", 
    "version" : { 
    "number" : "5.2.0", 
    "build_hash" : "24e05b9", 
    "build_date" : "2017-01-24T19:52:35.800Z", 
    "build_snapshot" : false, 
    "lucene_version" : "6.4.0" 
    }, 
    "tagline" : "You Know, for Search" 
} 

所以elasticsearch运行良好。

Answer 1

如果你有你的hosts为：

hosts => "localhost" 

，并确保该http端口您已上面提到的未绑定到任何其他进程。

如果确实不是这种情况，请运行plugin list并检查是否存在http-input插件。