TLDRChris experiences issues setting up winlogbeat->logstash->openobserve, and seeks a solution. Hengfei suggests disabling healthcheck in logstash.
Chris
Mon, 12 Jun 2023 16:22:47 UTC
hi..... I currently have windows event logs flowing winlogbeat->logstash->elasticsearch, and am trying to do winlogbeat->logstash->openobserve.... i've tried the logstash elasticsearch output but can't get the healthcheck against openobserve to succeed - i think it is receiving html instead of json when looking for the version number..... i've also tried the logstash http output, and i see events going into openobserve but each results in took:0 with no events being ingested.... does anyone have a recipe for logstash->openobserve? i have managed winlogbeat->openobserve as a test and it ingests fine, but i'm constrained to having logstash in the middle
Hengfei
Mon, 12 Jun 2023 16:52:39 UTC
because of healthcheck, can you disable healthcheck in logstash?
OpenObserve
Indexed 419 threads
OpenObserve is an open-source, petabyte-scale observability platform for the cloud native realm, offering a 10x cost reduction and 140x less storage use compared to competitors like Elasticsearch or Splunk. Built in Rust for exceptional performance, it offers comprehensive features like logs, metrics, traces, dashboards, and more | Knowledge Base powered by Struct.AI
Chris
Mon, 12 Jun 2023 16:22:47 UTChi..... I currently have windows event logs flowing winlogbeat->logstash->elasticsearch, and am trying to do winlogbeat->logstash->openobserve.... i've tried the logstash elasticsearch output but can't get the healthcheck against openobserve to succeed - i think it is receiving html instead of json when looking for the version number..... i've also tried the logstash http output, and i see events going into openobserve but each results in took:0 with no events being ingested.... does anyone have a recipe for logstash->openobserve? i have managed winlogbeat->openobserve as a test and it ingests fine, but i'm constrained to having logstash in the middle