LogStash - 無法執行操作

Question

我正在嘗試運行 LogStash，但它接縫表明 logstash 在執行步驟時失敗了。

有什么幫助嗎？

日志跟蹤：[2023-01-04T07:04:02,977][錯誤][logstash.agent] 無法執行操作 {:action=>LogStash::PipelineAction::Create/pipeline_id:creta_jobs, :exception=>"Java: :JavaLang::IllegalStateException", :message=>"無法配置插件：無法評估${corauser1} 。替換變量corauser1未在 Logstash 秘密存儲或環境條目中定義，並且沒有給出默認值。", : backtrace=>["org.logstash.config.ir.CompiledPipeline.(CompiledPipeline.java:120)", "org.logstash.execution.JavaBasePipelineExt.initialize(JavaBasePipelineExt.java:85)", "org.logstash.execution. JavaBasePipelineExt$INVOKER$i$1$0$initialize.call(JavaBasePipelineExt$INVOKER$i$1$0$initialize.gen)", "org.jruby.internal.runtime.methods.JavaMethod$JavaMethodN.call(JavaMethod.java:846)" , "org.jruby.ir.runtime.IRRuntimeHelpers.instanceSuper(IRRuntimeHelpers.java:1229)", "org.jruby.ir.runtime.IRRuntimeHelpers.instanceSuperSplatArgs(IRRuntimeHelpers.88) 213246945888:1202)", "org.jruby.ir.targets.indy.InstanceSuperInvokeSite.invoke(InstanceSuperInvokeSite.java:29)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$initialize$0 (/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:48)", "org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:139)", "org. jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:112)", "org.jruby.ir.targets.indy.InvokeSite.invoke(InvokeSite.java:208)", "usr.share.logstash. logstash_minus_core.lib.logstash.pipeline_action.create.RUBY$method$execute$0(/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:50)", "usr.share.logstash.logstash_minus_core .lib.logstash.pipeline_action.create.RUBY$method$execute$0$ VARARGS (/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:49)", "org.jruby.internal. runtime.methods.CompiledIRMethod.call(CompiledIRMethod.8 8213246945888:139)", "org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:112)", "org.jruby.ir.targets.indy.InvokeSite.invoke(InvokeSite.8821324694588)88:2 ", "usr.share.logstash.logstash_minus_core.lib.logstash.agent.RUBY$block$converge_state$2(/usr/share/logstash/logstash-core/lib/logstash/agent.rb:386)", "org. jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:141)", "org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:64)", "org.jruby.runtime.IRBlockBody.call(IRBlockBody.88213884:64588:9455) 58)", "org.jruby.runtime.Block.call(Block.java:143)", "org.jruby.RubyProc.call(RubyProc.java:309)", "org.jruby.internal.runtime.RubyRunnable .run(RubyRunnable.java:107)", "java.base/java.lang.Thread.run(Thread.java:833)"]}

我執行了這個命令 sudo systemctl start logstash.service 我預計 logstash 會運行但它失敗了。

Answer 1

“無法配置插件：無法評估 ${corauser1}。替換變量 corauser1 未在 Logstash 秘密存儲或環境條目中定義，並且沒有給出默認值。”

您的配置包含一個 ${} 引用，但 logstash 無法找到應替換為什么的定義。 您可以使用 ${corauser1:defaultUser} 設置變量未定義時使用的默認值