【发布时间】:2017-11-26 17:52:39
【问题描述】:
我正在尝试使用 docker-compose 安装 docker-elk 堆栈,弹性搜索和 kibana 工作正常,但我的 logstash 没有连接到弹性搜索并抛出如下所示的错误,我是第一次安装它所以对它了解不多。
logstash-5-6 | [2017-11-26T06:09:06,455][ERROR][logstash.outputs.elasticsearch] Failed to install template. {:message=>"Template file '' could not be found!", :class=>"ArgumentError", :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.2-java/lib/logstash/outputs/elasticsearch/template_manager.rb:37:in `read_template_file'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.2-java/lib/logstash/outputs/elasticsearch/template_manager.rb:23:in `get_template'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.2-java/lib/logstash/outputs/elasticsearch/template_manager.rb:7:in `install_template'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.2-java/lib/logstash/outputs/elasticsearch/common.rb:58:in `install_template'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.2-java/lib/logstash/outputs/elasticsearch/common.rb:25:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator_strategies/shared.rb:9:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:43:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:290:in `register_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:301:in `register_plugins'", "org/jruby/RubyArray.java:1613:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:301:in `register_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:310:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:235:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:398:in `start_pipeline'"]}
logstash-5-6 | [2017-11-26T06:09:06,455][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//elasticsearch-5-6:9201"]}
Logstash.conf
input {
tcp {
port => 5001
}
}
## Add your filters / logstash plugins configuration here
output {
elasticsearch {
hosts => "localhost:9201"
}
}
【问题讨论】:
-
你能把logstash管道cfg(过滤器和输出)连同问题一起发布吗
-
@Ram 好的,我会编辑帖子并添加这些内容
-
@Ram 我已经添加了配置你可以检查一下
-
启动时的logstash会尝试安装一个默认的索引模板,如果没有,索引模板将在路径中可用(如果你的logstah安装在/opt中)那么路径将是/ opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-x.x-java/lib/logstash/outputs/elasticsearch/ 检查文件 elasticsearch-template-esXx.json (其中 X 是 elasticsearch 版本) 存在,如果没有,logstash 没有正确安装
标签: docker-compose logstash centos7 elastic-stack elasticsearch-5