Filebeat Service将无法在CentOS 7上启动

Question

Filebeat will not start on my CentOS 7 box. I have Logstash running fine, Kibana can be accessed, and I even installed packetbeat to see if it was something wrong with the beats, but Packetbeat works fine.

Here is what is happening when I try to start filebeat:

Here are the filebeat logs:

My Filebeat config passes the '-configtest' option, so it can't be that. The only output that I get from the debugging option is this:

Exiting: Could not start registrar: Error loading state: Error decoding states: EOF

I have also tried these two commands to no avail:

systemctl reset-failed filebeat.service
systemctl start filebeat.service

Anyone have any other commands to try to try and get this to work?

Answer 1

You need to delete the registry file, this is a known issue appartently. Forum post with an answer from the ELK guys

rm -r /var/lib/filebeat/registry
systemctl reset-failed filebeat
systemctl start filebeat