# Need help for getting the logs

**URL:** <https://forum.ansible.com/t/need-help-for-getting-the-logs/35319>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [June 9, 2021, 12:00pm UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319 "2021-06-09T12:00:57Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sasikanth\_Deva](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@Sasikanth\_Deva](https://forum.ansible.com/u/Sasikanth_Deva)\
**Post date:** [June 9, 2021, 12:00pm UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/1 "2021-06-09T12:00:57Z")

</div>

Installation AWX on Kubernetes with version 10.0.0.  
Getting the error while integrating with the Logstash (screenshot is attached below).

> **(attachments)**
>
> ![MicrosoftTeams-image (1).png](https://us1.discourse-cdn.com/ansible/original/2X/a/abc05b28c179fcc332a08910fb9faecbf3a97c97.png)

---

<div class="post-metadata">

**Author:** ![Sasikanth\_Deva](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@Sasikanth\_Deva](https://forum.ansible.com/u/Sasikanth_Deva)\
**Post date:** [June 11, 2021, 10:17am UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/2 "2021-06-11T10:17:09Z")

</div>

Hi Team

Can anyone please help me for getting the logs while integrating with the logstash.

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [June 11, 2021, 4:55pm UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/3 "2021-06-11T16:55:07Z")

</div>

This is going to be highly dependent on how you’ve setup your ELK stack, but as a boilerplate, this logstash.conf example should get you started:

cat /etc/logstash/conf.d/logstash.conf

input {

http {

port =\> 5055

codec =\> “json”

}

}

filter {

mutate {

remove\_field =\> [“[headers]” ]

}

}

output {

elasticsearch {

hosts =\> [“[http://192.168.0.4:9200](http://192.168.0.4:9200)”]

index =\> “aap-logs-%{+YYYY.MM.dd}”

manage\_template =\> false

#stdout { codec =\> rubydebug }

}

# file {

# path =\> “/var/log/logstash/aap.log”

# }

}

Input defines what we’ll listen on, and will match our Tower setup.

Filter/mutate removes the HTTP headers which is just overhead we don’t need.

Output is what we send to, so the Elastic DB, with a daily based logging index.

File can be used here for further debugging, if required.

In AWX setup Settings-\>system-\>logging to match the above.  
Once saved, try the “TEST” button whilst logstash is running and tail -f /var/log/logstash/logstash-plain.log  
If it’s working, then it shouldn’t throw any errors. Go to Kibana etc and you should see the Test message in your data

Phil.

---

<div class="post-metadata">

**Author:** ![Sasikanth\_Deva](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@Sasikanth\_Deva](https://forum.ansible.com/u/Sasikanth_Deva)\
**Post date:** [June 14, 2021, 8:06am UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/4 "2021-06-14T08:06:38Z")

</div>

it is not working.  
i changed the logstash.conf  
i am getting the same error while trying to get the logs even after making changes in logstash.conf

---

<div class="post-metadata">

**Author:** ![ffirg](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/ffirg/32/10029_2.png) [@ffirg](https://forum.ansible.com/u/ffirg)\
**Post date:** [June 15, 2021, 10:14am UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/5 "2021-06-15T10:14:45Z")

</div>

well sorry but replying with “it is not working” and not supplying any further info isn’t exactly helping anyone help you!

---

<div class="post-metadata">

**Author:** ![Sasikanth\_Deva](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@Sasikanth\_Deva](https://forum.ansible.com/u/Sasikanth_Deva)\
**Post date:** [June 23, 2021, 12:58pm UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/6 "2021-06-23T12:58:34Z")

</div>

Hi Team

I have applied the Logstash.conf file in my Logstash.conf which i got reply for my Quarry.I had attached the screenshot below.  
and I have done setup for AWX Settings-\>system-\>logging to match the conf file,  
I filled all the required fields in logging and I testted it i got the same error has it is attached in the screenshot.  
Is there any other way for getting the logs while integrating with the logstash.

> **(attachments)**
>
> ![awx log error screenshot..png](https://us1.discourse-cdn.com/ansible/original/2X/4/46efb162dc055f541a20672d1bab89057993247d.png)  
> ![Screenshot (24).png](https://us1.discourse-cdn.com/ansible/original/2X/3/30c4cb36c725244edfe0ad676949313367695669.png)

---

<div class="post-metadata">

**Author:** ![Sasikanth\_Deva](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@Sasikanth\_Deva](https://forum.ansible.com/u/Sasikanth_Deva)\
**Post date:** [June 24, 2021, 12:20pm UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/7 "2021-06-24T12:20:49Z")

</div>

i tried to configure that logstash.conf but it is not running and ignoring the pipeline.yml  
screenshot is attached below.  
Can anyone please help me

> **(attachments)**
>
> ![logstash.conf error.png](https://us1.discourse-cdn.com/ansible/original/2X/6/6429eb162cc7f6740bf1244e380a1925663cac73.png)

---

<div class="post-metadata">

**Author:** ![Sasikanth\_Deva](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@Sasikanth\_Deva](https://forum.ansible.com/u/Sasikanth_Deva)\
**Post date:** [June 28, 2021, 4:25am UTC](https://forum.ansible.com/t/need-help-for-getting-the-logs/35319/8 "2021-06-28T04:25:47Z")

</div>

Hi team

Can anyone please help me for getting the logs while integrating with the logstash in AWX application.

Thanks in advance.
