将文件内容从 filebeat 发送到 logstash 时出现问题

Question

我是 ELK 的新手，我正在尝试使用 ELK 堆栈进行一些动手操作。我在 WINDOWS 上执行以下操作， 1.安装Elasticsearch，确认http://localhost:9200/ 2. 安装logstash，使用http://localhost:9600/确认 logstash -f logstash.config

    logstash.config file looks like this,
    input {
        beats {
            port => "5043"
        }
    }
    # The filter part of this file is commented out to indicate that it is
    # optional.
    # filter {
    #
    # }
    output {
        elasticsearch { hosts => ["localhost:9200"] }
    }


 3. Installed Kibana, confirmed using http://localhost:5601

    Now, i want to use filebeat to pass a log file to logstash which parses and forwards it to Elastic search for indexing. and finally kibana displays it.

    In order to do that, 
"

i did the following changes in filebeat.yml.
change 1 :
In Filebeat prospectors, i added 
paths:
    # - /var/log/*.log
     - D:\KibanaInput\vinod.log
Contents of vinod.log: Hello World from FileBeat.

Change 2:
In Outputs,
#output.logstash:
  # The Logstash hosts
   hosts: ["localhost:9600"]

when i run the below command,
filebeat  -c filebeat.yml -e

i get the below error,
ERR Connecting error publishing events (retrying): Failed to parse JSON response: json: cannot unmarshal string into Go value of type struct { Number string }

Please let me know what mistake i am doing.

Answer 1

你走在一条好路上。

请确认以下内容：

1. 在您的 filebeat.yml 中，确保您在 output.logstash: 行中没有与您的更改编号 2 相对应的注释。

2. 确保您的消息被正确理解。在您的 logstash 管道配置文件中添加以下输出。

   输出{ 标准输出 { 编解码器 => json } }

   3.在调试模式下启动您的logstash。

   4.如果您正在读取具有相同内容的相同文件，请确保删除 filebeat 中的注册表文件。 ($filebeatHome/data/registry)

   5.读取日志文件。