Filebeat> Logstash> ElasticSearch - 伐木工错误

Question

尝试让Filebeat与logstash一起使用。目前我得到这个错误：

2016/11/14 04:54:27.721478 output.go:109: DBG output worker: publish 2047 events 
2016/11/14 04:54:27.756650 sync.go:85: ERR Failed to publish events caused by: lumberjack protocol error 
2016/11/14 04:54:27.756676 single.go:91: INFO Error publishing events (retrying): lumberjack protocol error 
2016/11/14 04:54:28.782729 sync.go:85: ERR Failed to publish events caused by: lumberjack protocol error 
2016/11/14 04:54:28.782756 single.go:91: INFO Error publishing events (retrying): lumberjack protocol error 
2016/11/14 04:54:30.786983 sync.go:85: ERR Failed to publish events caused by: lumberjack protocol error 
2016/11/14 04:54:30.787017 single.go:91: INFO Error publishing events (retrying): lumberjack protocol error 
2016/11/14 04:54:34.808528 sync.go:85: ERR Failed to publish events caused by: lumberjack protocol error 
2016/11/14 04:54:34.808578 single.go:91: INFO Error publishing events (retrying): lumberjack protocol error 

有没有人有解决方案，或许你可以指出我在正确的方向吗？

Filebeat v5和logstash v5。

在本地执行此操作。

谢谢！

Answer 1

这可能是因为您的logstash对您的filebeat不可见。 请在节拍上输入logstash。我开始我的logstash端口没有31311.

input { 
    beats { 
    host => "0.0.0.0" 
    port => 31311 
    } 
} 

配置在filebeat.yml：ElasaticSearch输出默认情况下。请评论它并取消logstash输出配置的注释。它应该如下所示。

output.logstash: 
    # The Logstash hosts 
    hosts: ["localhost:31311"] 

如果您在这两者之间建立了任何身份验证，请注意。 在完成此配置后，我能够将我的消息看到logstash，最后看到Kibana。希望它能起作用。