运行时,修改了目标log文件,打印信息如下,且没发现有提交到给elasticsearch:
错误消息:
配置信息:
/root/software/filebeat/filebeat.yml
/root/software/logstash/config/logstash.conf
端口号都是匹配的,5044,并且telnet能连接5044,确定服务有开启
哪位大神告诉我怎么解决这个问题呢??
错误消息:
2018-03-29T15:49:45.712+0800 ERROR pipeline/output.go:92 Failed to publish events: write tcp 192.168.1.80:53310->192.168.1.80:5044: write: connection reset by peer
配置信息:
/root/software/filebeat/filebeat.yml
filebeat.prospectors:
- type: log
paths:
- /mnt/hgfs/www/ciboapp/storage/custom/custom-20180322.log
output.logstash:
hosts: ["192.168.1.80:5044"]
/root/software/logstash/config/logstash.conf
input {
beats {
port => "5044"
}
}
filter {
grok {
match => { "message" => "%{IP:client} %{WORD:method} %{URIPATHPARAM:request} %{NUMBER:bytes} %{NUMBER:duration}" }
}
}
output {
elasticsearch {
hosts => ["192.168.1.80:9200"]
index => "custom-%{+YYYY.MM.dd}"
}
}
端口号都是匹配的,5044,并且telnet能连接5044,确定服务有开启
哪位大神告诉我怎么解决这个问题呢??
3 个回复
luozi192
赞同来自:
SilentHz
赞同来自:
jobkouen - 90后IT男
赞同来自:
output {
elasticsearch {
hosts => "http://0.0.0.0:9200/"
}
}