Kibana 将文件节拍连接到ElasticSearch

lndjwyie  于 2023-01-19  发布在  Kibana
关注(0)|答案(1)|浏览(174)

我一整天都在面对这个问题,我不明白我做错了什么。我是一个初学者,我遵循了一个教程,如何获得一个完整的设置之间的Filebeat,elasticsearch和kibana。Filebeat不断失败连接到elasticsearch从日志。以下是我的代码

filebeat.inputs:
  - type: log
  enabled: true
  paths:    
    - C:\ProgramData\Elastic\Elasticsearch\logs\*.log

filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false

setup.template.settings:
  index.number_of_shards: 1

setup.kibana:

output.elasticsearch:
  hosts: ["localhost:9200"]

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

这是日志

2019-05-22T02:28:02.352+0200    ERROR   pipeline/output.go:100  Failed to connect to backoff(elasticsearch(http://localhost:9200)): Connection marked as failed because the onConnect callback failed: This Beat requires the default distribution of Elasticsearch. Please upgrade to the default distribution of Elasticsearch from elastic.co, or downgrade to the oss-only distribution of beats
2019-05-22T02:28:02.352+0200    INFO    pipeline/output.go:93   Attempting to reconnect to backoff(elasticsearch(http://localhost:9200)) with 62 reconnect attempt(s)
2019-05-22T02:28:02.355+0200    INFO    elasticsearch/client.go:734 Attempting to connect to Elasticsearch version 5.5.0
2019-05-22T02:28:15.560+0200    INFO    [monitoring]    log/log.go:144  Non-zero metrics in the last 30s    {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":3781,"time":{"ms":62}},"total":{"ticks":6640,"time":{"ms":94},"value":6640},"user":{"ticks":2859,"time":{"ms":32}}},"handles":{"open":303},"info":{"ephemeral_id":"09bb9e79-0c2c-40fd-8a89-5098d60f3374","uptime":{"ms":2521080}},"memstats":{"gc_next":4259632,"memory_alloc":2907056,"memory_total":24455264,"rss":-8192}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"read":{"bytes":673},"write":{"bytes":260}},"pipeline":{"clients":1,"events":{"active":28,"retry":28}}},"registrar":{"states":{"current":5}}}}}
kulphzqa

kulphzqa1#

错误信息非常清楚
无法连接到回退(ElasticSearch(http://localhost:9200)):由于onConnect回调失败,连接被标记为失败:此Beat需要Elasticsearch的默认分发版本。请从www.example.com升级到Elasticsearch的默认分发版本elastic.co,或降级到Beat的仅限操作系统的分发版本
你的Filebeat版本与Elasticsearch版本之间似乎不匹配。你已安装filebeat-oss,但正在尝试与licensed Elasticsearch交互。
所以,理论上,你有两个选择:
1.您可以安装licensed Filebeat并保持Elasticsearch不变
1.您可以降级到elasticsearch-oss并保持Filebeat不变
然而,在我看来,由于您使用的是Elasticsearch5.5.0(旧版本),因此唯一的选择就是安装Filebeat 5.6.16

相关问题