Search code examples
logstashrsyslog

logstash's syslog is not consuming logs from rsyslog server

I am having above configuration for rsyslog server to output it to logstash,

$tail /etc/rsyslog.d/70-output.conf
*.*       @@logstash:5514

And in logstash.conf I have configured it as follows,

input {
syslog {
type => "syslog"
port => "5514"
}
}

output {
file {
path => "/var/log/logstash/debug.log"
codec => "json"
}
}

How can I debug it further?

Solution

  • tcpdump helped me to check whether I receive syslog on logsatsh or not.