我已经安装了文件节拍的6.4版本,然后我决定恢复到1.3。因此,我使用了命令‘6.4.0-x86_64.rpm’来删除它,当我试图安装filerob1.3时,我得到了错误:
package filebeat-6.4.0-1.x86_64 (which is newer than filebeat-1.3.1-1.x86_64) is already installed
file /etc/filebeat/filebeat.yml from install of filebeat-1.3.1-1.x86_64 conflicts with file from package filebeat-
要实现的目标-在20台生产服务器上检查ansible的"filebeat“和"Telegraf”服务的状态。如果任何服务器上的任何服务停止,我可以得到警报。
---
- hosts: ALL
tasks:
- name: checking service status
command: systemctl status "{{ item }}"
with_items:
- filebeat
- telegraf
register: result
ignore_errors:
我正在尝试在Docker Swarm模式下安装ELK。
然后,我需要告诉filebeat将日志发送到logstash。
下面是我的filebeat配置文件:
#=========================== Filebeat prospectors =============================
## Each - is a prospector. Most options can be set at the prospector level, so
## you can use different prospectors for various configuration
我不明白如何运行这个文件节拍来将输出发送到elasticsearch。
这来自filebeat.yml文件,
- input_type: log
# Paths that should be crawled and fetched. Glob based paths.
paths:
- /var/log/nginx/access.log
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["localhost:9200"]
index: 'filebeat_n
在ubuntu上,我尝试使用for循环在同一台主机上启动多个filebeat实例,但我遇到了一个奇怪的行为 我正在尝试启动的命令 for i in `seq 1 2` ; do /etc/filebeat-test/filebeat-$i/filebeat & done 以及我得到的错误消息,然后当我退出命令时: Exiting: error loading config file: stat filebeat.yml: no such file or directory
^C
[1]- Termine 1 /etc/filebeat-test/fil
我在运行filebeat时遇到以下错误 $ filebeat test config 2019-03-20 01:57:12.112399037 +0000 UTC m=+0.016941991 write error: failed to open new file: open /var/log/filebeat/filebeat: permission denied
2019-03-20 01:57:12.112659642 +0000 UTC m=+0.017202599 write error: failed to open new file: open /var/log/fileb
我对filebeat和ELK栈非常陌生。在成功地构建了Filebeat、Elastic和Kibana堆栈索引apache access日志文件之后,我想使用Filebeat将输出发送到一个文件以进行测试。然而,我总是遇到一个错误。Filebeat启动,然后立即再次退出,因为它正在寻找elastic。
日志文件的相关部分如下所示。
2020-02-20T16:19:40.794+0100 WARN beater/filebeat.go:152 Filebeat is unable to load the Ingest Node pipelines for the configure
我有以下索引
➜ curl -s -X GET http://10.1.1.1:9200/_cat/indices\?v | grep "filebeat-new-7.2.0-2020.12"
green open filebeat-new-7.2.0-2020.12.06-000085 hklG4PmgQyOhE0DzNf56xg 1 1 83258752 0 80.1gb 40gb
green open filebeat-new-7.2.0-2020.12.03-000084