从6.6.2升级到6.7.0后,Filebeat停止工作
我的Filebeat配置是:
filebeat.inputs:
- type: log
enabled: true
paths:
- /var/www/current/log/production.log
- /var/www/current/log/api_v2.production.log
multiline.pattern: '^[EIWDF]\, '
multiline.negate: true
multiline.match: after
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
setup.template.settings:
index.number_of_shards: 3
setup.kibana:
output.elasticsearch:
hosts: ["ip:29200"]
但/ var / log / filebeat / filebeat显示:
2019-03-28T14:12:11.091Z ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://ip:9200)): Connection marked as failed because the onConnect callback failed: This Beat requires the default distribution of Elasticsearch. Please upgrade to the default distribution of Elasticsearch from elastic.co, or downgrade to the oss-only distribution of beats
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:189 retryer: send unwait-signal to consumer
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:191 done
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:166 retryer: send wait signal to consumer
2019-03-28T14:12:11.091Z INFO [publish] pipeline/retry.go:168 done
2019-03-28T14:12:11.091Z INFO pipeline/output.go:93 Attempting to reconnect to backoff(elasticsearch(http://ip:9200)) with 5 reconnect attempt(s)
2019-03-28T14:12:11.125Z INFO elasticsearch/client.go:739 Attempting to connect to Elasticsearch version 6.7.0
然而,当我击中curl ip:9200
它返回:
{
"name" : "30KRsiU",
"cluster_name" : "docker-cluster",
"cluster_uuid" : "xim_BCzFSXWrAO_kMO3TQA",
"version" : {
"number" : "6.7.0",
"build_flavor" : "oss",
"build_type" : "docker",
"build_hash" : "8453f77",
"build_date" : "2019-03-21T15:32:29.844721Z",
"build_snapshot" : false,
"lucene_version" : "7.7.0",
"minimum_wire_compatibility_version" : "5.6.0",
"minimum_index_compatibility_version" : "5.0.0"
},
"tagline" : "You Know, for Search"
}
我该如何工作?我没有想法。谢谢你的帮助。
如果您使用的是Elasticsearch的开源“OSS”分发版,则还必须使用相应的“OSS”版本部署所有连接的节拍。使用泊坞窗图像时,将-oss
后缀附加到图像名称以获取正确的图像。对于弹性网站的基于文件的下载,请在版本号之前插入-oss
,例如: https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-oss-7.0.0-linux-x86_64.tar.gz
我有同样的问题(心跳),一个建议的解决方案降级到6.6.2
2019-04-01T09:36:27.474Z错误实例/ beat.go:802退出:无法连接到任何已配置的Elasticsearch主机。错误:[错误连接到Elasticsearch http://localhost:19200:连接标记为失败,因为onConnect回调失败:此Beat需要Elasticsearch的默认分发。请从elastic.co升级到Elasticsearch的默认分发,或降级到beats-only分发的beats]
脚步
wget https://artifacts.elastic.co/downloads/beats/heartbeat/heartbeat-6.6.2-amd64.deb
dpkg -i heartbeat-6.6.2-amd64.deb
sudo服务心跳弹性重启
Log现在显示它已成功连接到ES
2019-04-01T09:42:38.061Z INFO pipeline / output.go:105建立与退避的连接(elasticsearch(http://localhost:9200))