简体   繁体   English

哪一行表明 filebeat 正在 Elasticsearch 中创建索引

[英]What line indicates that filebeat is creating an index in Elasticsearch

What line indicates that filebeat is creating an index in Elasticsearch.哪一行表明 filebeat 正在 Elasticsearch 中创建索引。 We are trying to debug the fact that its not creating an Elasticsearch index, but the harvester fails saying the index is missing.我们正在尝试调试它没有创建 Elasticsearch 索引的事实,但收割机失败说索引丢失。 Isn't it the job of Filebeat to create this index when it starts, if so which lines in the logs (obtained via kubectl logs <pod.id>) indicate that it is getting created in the first place. Filebeat 的工作不是在启动时创建此索引吗?如果是,日志中的哪些行(obtained via kubectl logs <pod.id>)表明它首先被创建。

Error log shows this for Filebeat 7.7.x, 7.6.x.. Filebeat 7.7.x、7.6.x 的错误日志显示了这一点。

Could not init registrar: registry file version 1 not supported无法初始化注册器:不支持注册表文件版本 1

Environment: Filebeat DaemonSet running in Kubernetes cluster环境:运行在Kubernetes集群中的Filebeat DaemonSet

Its using this script https://github.com/elastic/beats/blob/7.7/deploy/kubernetes/filebeat/filebeat-daemonset.yaml to run as a DaemonSet in a kubernetes environment.它使用此脚本https://github.com/elastic/beats/blob/7.7/deploy/kubernetes/filebeat/filebeat-daemonset.yaml作为 DaemonSet 在 ZB1795BZE98AF9BAAADA50 环境中运行。 VERSION was set to 7.7.0 https://github.com/elastic/beats/blob/7.7/deploy/kubernetes/filebeat/filebeat-daemonset.yaml#L23 and the error log has the above failure information. VERSION 设置为 7.7.0 https://github.com/elastic/beats/blob/7.7/deploy/kubernetes/filebeat/filebeat-daemonset.yaml#L23并且错误日志有上述失败信息。

Looking at the default ConfigMap configuration , there's no index setting specified, and hence, Filebeat will create a new index called filebeat-%{[agent.version]}-%{+yyyy.MM.dd} by default.查看默认的ConfigMap配置,没有指定index设置,因此 Filebeat 将默认创建一个名为filebeat-%{[agent.version]}-%{+yyyy.MM.dd}的新索引。

If you don't see an index of that name being created, it might be that Filebeat has nothing to read, ie that you have nothing in /var/log/containers/*.log ...如果您没有看到正在创建该名称的索引,则可能是 Filebeat 没有可读取的内容,即/var/log/containers/*.log ...

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM