How to configure logstash-forwarder and make it working on AWS linux instances?

I wrote this init script for RedHat/CentOS:

https://gist.github.com/jarpy/df2c4943e70f88b6076a There’s also a bunch of example init scripts, for various distributions, taken from James Turnbull’s excellent Logstash book:

http://www.logstashbook.com/code/4/

Without knowing more about how you installed logstash-forwarder, it’s hard to give a good answer to your question. You can grab and install the init script in the GitHub repo using:

cd /etc/init.d/; sudo wget https://raw.github.com/elasticsearch/logstash-forwarder/master/logstash-forwarder.init -O logstash-forwarder
sudo chmod +x logstash-forwarder
sudo update-rc.d logstash-forwarder defaults

This assumes your logstash-forwarder binary is installed to /opt/logstash-forwarder/bin/logstash-forwarder Edit the DAEMON variable as needed if that’s not the case.

Checkout this tutorial for all the information on setting up an ELK server on Ubuntu:

• How To Use Logstash and Kibana To Centralize Logs On Ubuntu 14.04

Note that the init script was removed from the logstash-forwarder Github repo in February. This link is to the last version of the init script

https://raw.githubusercontent.com/elastic/logstash-forwarder/a73e1cb7e43c6de97050912b5bb35910c0f8d0da/logstash-forwarder.init