[英]FileBeat not sending data to ElasticSearch Kibana
I'm unable to receive data in the Kibana dashboard from the Filebeat agent.我无法在 Kibana 仪表板中从 Filebeat 代理接收数据。 I'm using self-managed ELK with AWS EC2 server.
我将自我管理的 ELK 与 AWS EC2 服务器一起使用。 Below is my filebeat.yml
下面是我的文件beat.yml
filebeat.inputs:
- type: log
enabled: true
paths:
- /home/ubuntu/logs/consumer-app/*.log
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
index.number_of_shards: 1
output.elasticsearch:
hosts: ["http://PUBLIC_IP:9200"]
setup.kibana:
host: "http://PUBLIC_IP:5601"
elasticsearch.yaml elasticsearch.yaml
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: PUBLIC_IP
http.port: 9200
discovery.type: single-node
kibana.yml kibana.yml
server.port: 5601
server.host: PUBLIC_IP
elasticsearch.hosts: ["http://PUBLIC_IP:9200"]
When I try to hit sudo filebeat setup command.当我尝试点击sudo filebeat setup命令时。 Im getting the below error.
我收到以下错误。
Overwriting ILM policy is disabled.覆盖 ILM 策略已禁用。 Set
setup.ilm.overwrite: true
for enabling.设置
setup.ilm.overwrite: true
以启用。 Index setup finished.索引设置完成。 Loading dashboards (Kibana must be running and reachable)
加载仪表板(Kibana 必须正在运行并且可以访问)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://localhost:5601/api/status fails: fail to execute the HTTP GET request: Get "http://localhost:5601/api/status": dial tcp 127.0.0.1:5601: connect: connection refused. Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://localhost:5601/api/status fails: fail to execute the HTTP GET 请求:Get "http://localhost:5601/api /状态”:拨打 tcp 127.0.0.1:5601:连接:连接被拒绝。 Response: .
回复: 。
Since I'm new to ELK and filebeat, any help is much appreciated.由于我是 ELK 和 filebeat 的新手,非常感谢任何帮助。
i believe the filbeat is trying to communicate to kibana but unfortunately kibana is not running.我相信 filbeat 正在尝试与 kibana 通信,但不幸的是 kibana 没有运行。
In filebeat.yml add this line在 filebeat.yml 添加这一行
setup.ilm.overwrite: true
Ensure that elasticsearch and kibana is running then execute the setup command of filebeat.确保 elasticsearch 和 kibana 正在运行,然后执行 filebeat 的设置命令。 Keep posted, Thanks!!!
继续发帖,谢谢!!!
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.