-
Notifications
You must be signed in to change notification settings - Fork 9
Description
I'm currently using logstash 5.6.1 version and
logstash-cloudtrail-codec-3.0.0 version but I'm getting this error that I don't seem to understand
[ERROR] 2018-01-11 00:24:05.705 [[main]<s3] pipeline - A plugin had an unrecoverable error. Will restart this plugin.
Plugin: <LogStash::Inputs::S3 access_key_id=>"XXX", bucket=>"cloudtrail.cimsprd", region=>"us-east-1", secret_access_key=>"XXX", prefix=>"AWSLogs/072478573200/CloudTrail/", type=>"np", exclude_pattern=>".\/CloudTrail\-Digest\/.", add_field=>{"source"=>"gzfiles"}, codec=><LogStash::Codecs::CloudTrail id=>"084358194712e162546210adf13d763cd90d870f-1", enable_metric=>true, charset=>"UTF-8">, id=>"084358194712e162546210adf13d763cd90d870f-2", enable_metric=>true, delete=>false, interval=>60, temporary_directory=>"/tmp/logstash">
Error: Access Denied
I don't seem to understand this access denied message.
Can you please help me in this regard.
Avinash
- Version: 5.6.1
- Operating System: Ubuntu 16.04
- Config File:
input {
s3 {
access_key_id => "xxxx"
bucket => "xxxx"
region => "us-east-1"
secret_access_key => "xxxx"
prefix => "AWSLogs/xxxx/CloudTrail/"
type => "np"
exclude_pattern => "./CloudTrail-Digest/."
add_field => { source => gzfiles }
codec => cloudtrail {}
}
}
filter {
mutate {
replace => [ "xxxxx", "cims-prd" ]
}
}
output {
elasticsearch {
hosts =>["xxxx"]
user => "xxxx"
password => "xxxx"
ssl => true
index => "ctrail-%{type}-%{+YYYY.MM}"
}
}