启动时的 logstash 问题（在 kube.netes pod 中）

Question

我通过 kube.netes Pod 在容器中启动了一个 logstash 服务，我自愿更改了配置以查看行为。 现在，服务的配置文件不是

output {
 elasticsearch {
   hosts => ["elasticsearch:9200"]
 }

但

output {
 elasticsearch {
   hosts => ["elasticsearch1:9200"]
 }

然后，当我启动容器时，日志是：

[2023-01-13T14:26:49,474][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elasticsearch1:9200/]}}
[2023-01-13T14:26:50,076][WARN ][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=>"http://elasticsearch1:9200/"}

所以参考elasticsearch1然后突然参考elasticsearch

[2023-01-13T14:27:01,405][WARN ][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [http://elasticsearch:9200/][Manticore::ResolutionFailure] elasticsearch: Name or service not known"}

为什么？

Answer 1

除了插件中定义的任何 elasticsearch 实例之外，logstash 还将尝试连接到 logstash.yml 中由 xpack.monitoring.elasticsearch.hosts 定义的 elasticsearch 实例，以检查您使用的是什么许可证。