![](/img/trans.png)
[英]logstash_forwarder connected to lostash-server-IP but never receive event
[英]How to configure LumberJack(LogStash-forwarder) on windows
我已使用此手冊在ubuntu服務器上安裝了ELK,
現在,我想索引Windows服務器中的一些日志文件,因此我安裝了Logstash轉發器(LumberJack),但無法運行它。 這是logstash-forwarder.conf文件:
{
"network": {
"servers": [ "http://XX.XX.XX.XX:5000" ],
"ssl key": "D:/lumberjack/pki/tls/certs/logstash-forwarder.crt",
"ssl ca": "D:/lumberjack/pki/tls/certs/logstash-forwarder.crt",
"timeout": 15,
},
"files": [
{
"paths": [
#single paths are fine
"D:/bea12/Oracle/Middleware/domains/Google/servers/RT1/logs/AppLogs/RT1_APP_9_0.log",
#globs are fine too, they will be periodically evaluated
#to see if any new files match the wildcard.
"/var/logauth.log"
],
]
}
}
這是當我嘗試運行使用go-build創建的“ lumberjack.exe”時遇到的錯誤:
2015/04/30 18:17:39.052033 Failed unmarshalling json: invalid character '}' looking for beginning of object key string
2015/04/30 18:17:39.052033 Could not load config file d:\lumberjack\logstash-forwarder.conf: invalid character '}' looking for beginning of object key string
誰能告訴我我在做什么錯? 順便說一下,這是我用來運行轉發器的命令:
lumberjack.exe -config="d:\lumberjack\logstash-forwarder.conf"
好。 所以問題出在配置文件中,有兩個不必要的逗號,開始時不需要http:\\ :
{
"network": {
"servers": [ "XX.XX.XX.XX:5000" ],
"ssl key": "D:/lumberjack/pki/tls/certs/logstash-forwarder.key",
"ssl ca": "D:/lumberjack/pki/tls/certs/logstash-forwarder.crt",
"timeout": 15
},
"files": [
{
"paths": [
#single paths are fine
"D:/bea12/Oracle/Middleware/domains/google/servers/RT1/logs/AppLogs/RT1_APP_9_0.log",
#globs are fine too, they will be periodically evaluated
#to see if any new files match the wildcard.
"/var/logauth.log"
]
}
]
}
這是我建議在Windows上使用LumberJack的配置文件。
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.