无法确定正常启动时绑定或侦听的端口Logstash

我的日志存储版本是：

# /opt/logstash/bin/logstash --version
logstash 2.2.4

它被配置为根据filebeat文件从端口5044接收输入：

/etc/logstash/conf.d/02-beats-input.conf

我已将ssl设置为false，因为我没有使用它

但是，当我使用systemctl正常启动logstash服务时，它会启动并检查状态以确认它正在运行

   systemctl status logstash
    ● logstash.service - LSB: Starts Logstash as a daemon.
       Loaded: loaded (/etc/rc.d/init.d/logstash)
       Active: active (exited) since Mon 2016-07-18 19:14:51 BST; 15h ago
         Docs: man:systemd-sysv-generator(8)
      Process: 19965 ExecStop=/etc/rc.d/init.d/logstash stop (code=exited, status=0/SUCCESS)
      Process: 19970 ExecStart=/etc/rc.d/init.d/logstash start (code=exited, status=0/SUCCESS)
...
    logstash started

问题是logstash似乎没有在端口5044上接收输入。发送文件的主机：

single.go:126: INFO Connecting error publishing events (retrying): dial tcp 192.72.0.92:5044: getsockopt: connection refused

当我检查端口时

# netstat  -an | grep 5044

我什么也得不到。因此，即使logstash正在运行，我也无法判断它绑定到哪个端口并侦听

此外，防火墙会暂时停止以调查此问题

奇怪的是，我运行logstash是调试模式，如下所示：

# ./logstash --debug -f /etc/logstash/conf.d/02-beats-input.conf

我看得出来

# netstat -an | grep 5044
tcp6       0      0 :::5044                 :::*                    LISTEN
tcp6       0      0 192.72.0.92:5044        192.168.36.70:53720     ESTABLISHED
tcp6       0      0 192.72.0.92:5044        192.72.0.90:45980       ESTABLISHED
tcp6       0      0 192.72.0.92:5044        192.72.0.90:45975       ESTABLISHED
tcp6       0      0 192.72.0.92:5044        192.72.0.90:45976       ESTABLISHED

或

并且发送filebeats的主机可以连接

 output.go:87: DBG  output worker: publish 7 events
2016/07/19 10:02:08.017890 client.go:146: DBG  Try to publish 7 events to logstash with window size 10
2016/07/19 10:02:08.038579 client.go:124: DBG  7 events out of 7 events sent to logstash. Continue sending ...
2016/07/19 10:02:08.038615 single.go:135: DBG  send completed

---

请帮助指出此配置可能存在的错误。基于@LiGhTx117提供的信息，谢谢

我想

logstash使用的启动脚本位于：

/etc/init.d/logstash

除其他变量外，具有以下变量：

LS_USER=logstash
LS_GROUP=logstash
LS_HOME=/var/lib/logstash
LS_LOG_DIR=/var/log/logstash
LS_LOG_FILE="${LS_LOG_DIR}/$name.log"
LS_CONF_DIR=/etc/logstash/conf.d

所有权和许可权似乎是问题所在

我确保 用户日志存储以及组日志存储

及

然后，我还确保log_文件：logstash.log可由 用户/组日志存储

---

重新启动logstash

您是否尝试过systemctl logstash重新加载？在CentOS 7上，命令systemctl logstash reload返回未知操作“logstash”，systemctl reload logstash返回无法重新加载logstash。服务：作业类型重新加载不适用于单元logstash.service.Ok。你检查过你的.conf文件是否被解析和加载了吗？我如何检查呢？@pi。要检查配置文件是否已加载，一个粗略的解决方案是在配置文件中添加一个错误（如无效选项）。然后启动Logstash，它应该会以sthg失败，比如

“错误：您的配置有问题。”

 output.go:87: DBG  output worker: publish 7 events
2016/07/19 10:02:08.017890 client.go:146: DBG  Try to publish 7 events to logstash with window size 10
2016/07/19 10:02:08.038579 client.go:124: DBG  7 events out of 7 events sent to logstash. Continue sending ...
2016/07/19 10:02:08.038615 single.go:135: DBG  send completed

LS_USER=logstash
LS_GROUP=logstash
LS_HOME=/var/lib/logstash
LS_LOG_DIR=/var/log/logstash
LS_LOG_FILE="${LS_LOG_DIR}/$name.log"
LS_CONF_DIR=/etc/logstash/conf.d