Varlogsyslog not updating discreat dating sites
And a second identical VM on the same host (which didn't go through quite the same circle of repeatedly disabling ntp, having the date changed and rebooted multiple times) with the same file logs just fine.
I was testing the chrony/ntp services on a RHEL7 VM and was resetting its time as well as the host's.
Once I was satisfied with it I checked /var/log/messages and realized it hadn't been changed in a while.
[email protected] Box:/etc/filebeat$ cat filebeat.prospectors: - input_type: log paths: - /var/log/ignore_older: 24h scan_frequency: 10s document_type: Js LOG filebeat.registry_file: /var/lib/filebeat/registry output.logstash: hosts: ["logstash IP:5044"] # bulk_max_size: 2048 ssl.enabled: true ssl.certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"] logging.level: debug logging.to_files: true logging.to_syslog: false logging.files: path: /var/log/mybeat name: keepfiles: 7 rotateeverybytes: 10485760 # = [email protected] Box:/etc/filebeat$ sudo service filebeat restart * Restarting Sends log files to Logstash or directly to Elasticsearch.
filebeat 2016/11/17 .666470 beat.go:264: INFO Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat] 2016/11/17 .669682 beat.go:174: INFO Setup Beat: filebeat; Version: 5.0.1 2016/11/17 .669810 processor.go:43: DBG Processors: 2016/11/17 .669901 beat.go:180: DBG Initializing output plugins 2016/11/17 .670366 logstash.go:90: INFO Max Retries set to: 3 2016/11/17 .671280 outputs.go:106: INFO Activated logstash as output plugin.
# $File Owner syslog $File Group adm $File Create Mode 0640 $Dir Create Mode 0755 $Umask 0022 $Priv Drop To User syslog $Priv Drop To Group syslog # # Where to place spool files # $Work Directory /var/spool/rsyslog # # Include all config files in /etc/rsyslog.d/ $Include Config /etc/rsyslog.d/*.conftailing my /var/log/syslog file hasn't show anything within an hour.