Describe the problem Prior to the major update commit on May 3 lo

Hey hows it it going <a class="user-mention notranslate" data-hovercard-type="user" da

For example Logstash now gives me this message about the logs: <div class="snippet

Thank you <a class="user-mention notranslate" data-hovercard-type="user" data-hovercar

logs missing since last major update about helk HOT 4 CLOSED

offsecn00b commented on May 18, 2024

logs missing since last major update

from helk.

Comments (4)

Cyb3rWard0g commented on May 18, 2024

Hey hows it it going @offsecn00b ?? According to:

https://www.elastic.co/guide/en/logstash/6.2/logging.html#logging

Logstash emits internal logs during its operation, which are placed in LS_HOME/logs (or /var/log/logstash for DEB/RPM). The default logging level is INFO. Logstash’s logging framework is based on Log4j 2 framework, and much of its functionality is exposed directly to users.

HELK now uses the official Elastic Docker images (Centos). An easy way to look at the logs of all the containers now is:
https://github.com/Cyb3rWard0g/HELK/wiki/Installation#always-monitor-helk-installation-logs

sudo docker logs --follow helk-logstash

so the syntax for every container will be :

sudo docker logs --follow <container-name>

Let me know if that works.

from helk.

Cyb3rWard0g commented on May 18, 2024

For example Logstash now gives me this message about the logs:

Sending Logstash's logs to /usr/share/logstash/logs

I hope this helps. let me know if this answers your questions. Thank you @offsecn00b

from helk.

offsecn00b commented on May 18, 2024

Perfect thanks!

…

On Mon, Jun 11, 2018 at 1:07 AM Roberto Rodriguez ***@***.***> wrote: For example Logstash now gives me this message about the logs: Sending Logstash's logs to /usr/share/logstash/logs I hope this helps. let me know if this answers your questions. Thank you @offsecn00b <https://github.com/offsecn00b> — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#69 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AD7mu6nrFOtOkR6GE6kzAZLig19RXFmVks5t7fr-gaJpZM4Uc4r3> .

-- Tiago Rodrigues [email protected] Phone: +1203-619-4800

from helk.

Cyb3rWard0g commented on May 18, 2024

Thank you @offsecn00b 👍

from helk.

Recommend Projects