FileBeat不将数据发送到Elasticsearch Kibana
我无法从FileBeat代理中接收Kibana仪表板中的数据。我正在使用AWS EC2服务器的自我管理麋鹿。以下是我的 filebeat.yml
filebeat.inputs:
- type: log
enabled: true
paths:
- /home/ubuntu/logs/consumer-app/*.log
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
index.number_of_shards: 1
output.elasticsearch:
hosts: ["http://PUBLIC_IP:9200"]
setup.kibana:
host: "http://PUBLIC_IP:5601"
elasticsearch.yaml
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: PUBLIC_IP
http.port: 9200
discovery.type: single-node
kibana.yml
server.port: 5601
server.host: PUBLIC_IP
elasticsearch.hosts: ["http://PUBLIC_IP:9200"]
当我尝试击中 sudo filebeat设置命令时。我会遇到以下错误。
覆盖ILM策略是禁用的。设置setup.ilm.m.overwrite：true启用。 索引设置完成。 加载仪表板（Kibana必须运行并可以触及）
退出：连接到Kibana的错误：无法获取Kibana版本：http get request to http：// localhost：5601/api/status status dofs fafs flof：dof files：失败：无法执行http获取请求：获取http获取请求：获取http “ http：// localhost：5601/api/状态”：拨号TCP 127.0.0.1：5601：连接：连接拒绝。回复： 。
由于我是麋鹿和Filebeat的新手，因此对任何帮助都非常感谢。
I'm unable to receive data in the Kibana dashboard from the Filebeat agent. I'm using self-managed ELK with AWS EC2 server. Below is my filebeat.yml
filebeat.inputs:
- type: log
enabled: true
paths:
- /home/ubuntu/logs/consumer-app/*.log
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
index.number_of_shards: 1
output.elasticsearch:
hosts: ["http://PUBLIC_IP:9200"]
setup.kibana:
host: "http://PUBLIC_IP:5601"
elasticsearch.yaml
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: PUBLIC_IP
http.port: 9200
discovery.type: single-node
kibana.yml
server.port: 5601
server.host: PUBLIC_IP
elasticsearch.hosts: ["http://PUBLIC_IP:9200"]
When I try to hit sudo filebeat setup command. Im getting the below error.
Overwriting ILM policy is disabled. Set setup.ilm.overwrite: true for enabling.
Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://localhost:5601/api/status fails: fail to execute the HTTP GET request: Get "http://localhost:5601/api/status": dial tcp 127.0.0.1:5601: connect: connection refused. Response: .
Since I'm new to ELK and filebeat, any help is much appreciated.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我相信Filbeat试图与Kibana进行交流，但不幸的是Kibana没有运行。
在filebeat.yml中添加此行
确保运行Elasticsearch和Kibana，然后执行FileBeat的设置命令。保持发布，谢谢！！！
i believe the filbeat is trying to communicate to kibana but unfortunately kibana is not running.
In filebeat.yml add this line
Ensure that elasticsearch and kibana is running then execute the setup command of filebeat. Keep posted, Thanks!!!
只能通过以下方式传递-e标志来更改覆盖设置：
$
sudo filebeat设置-Index -management -e setup.ilm.m.overwrite：true这将导致覆盖索引不更改filebeat.yml，因此索引保持不变。
The overwrite setting can be changed by passing -E flag for current command only that way:
$
sudo filebeat setup --index-management -E setup.ilm.overwrite: trueThis will result in overwriting the index without changing the filebeat.yml, so the index remains read-only.