作者热门文章
- html - 出于某种原因,IE8 对我的 Sass 文件中继承的 html5 CSS 不友好?
- JMeter 在响应断言中使用 span 标签的问题
- html - 在 :hover and :active? 上具有不同效果的 CSS 动画
- html - 相对于居中的 html 内容固定的 CSS 重复背景?
从6.6.2升级到6.7.0后Filebeat停止工作
我的Filebeat配置是:
filebeat.inputs:
- type: log
enabled: true
paths:
- /var/www/current/log/production.log
- /var/www/current/log/api_v2.production.log
multiline.pattern: '^[EIWDF]\, '
multiline.negate: true
multiline.match: after
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
index.number_of_shards: 3
setup.kibana:
output.elasticsearch:
hosts: ["ip:29200"]
2019-03-28T14:12:11.091Z ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://ip:9200)): Connection marked as failed because the onConnect callback failed: This Beat requires the default distribution of Elasticsearch. Please upgrade to the default distribution of Elasticsearch from elastic.co, or downgrade to the oss-only distribution of beats
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:189 retryer: send unwait-signal to consumer
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:191 done
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:166 retryer: send wait signal to consumer
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:168 done
2019-03-28T14:12:11.091Z INFO pipeline/output.go:93 Attempting to reconnect to backoff(elasticsearch(http://ip:9200)) with 5 reconnect attempt(s)
2019-03-28T14:12:11.125Z INFO elasticsearch/client.go:739 Attempting to connect to Elasticsearch version 6.7.0
curl ip:9200
时,它返回:
{
"name" : "30KRsiU",
"cluster_name" : "docker-cluster",
"cluster_uuid" : "xim_BCzFSXWrAO_kMO3TQA",
"version" : {
"number" : "6.7.0",
"build_flavor" : "oss",
"build_type" : "docker",
"build_hash" : "8453f77",
"build_date" : "2019-03-21T15:32:29.844721Z",
"build_snapshot" : false,
"lucene_version" : "7.7.0",
"minimum_wire_compatibility_version" : "5.6.0",
"minimum_index_compatibility_version" : "5.0.0"
},
"tagline" : "You Know, for Search"
}
最佳答案
如果您使用的是Elasticsearch的开源“OSS”发行版,那么所有连接的拍子也必须与相应的“OSS”版本一起部署。使用docker镜像时,请将-oss
后缀附加到镜像名称以获取正确的镜像。对于从Elastic网站下载的基于文件的文件,请在版本号之前插入-oss
,例如https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-oss-7.0.0-linux-x86_64.tar.gz
关于elasticsearch - 升级后Filebeat 6.7.0无法将日志推送到Elasticsearch 6.7.0,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/55402183/
我是一名优秀的程序员,十分优秀!