【发布时间】:2017-12-27 14:46:20
【问题描述】:
努力让 filebeat 正常工作。
根据文档 (https://www.elastic.co/guide/en/beats/filebeat/6.1/load-kibana-dashboards.html),需要加载仪表板。
所以,在/etc/filebeat/filebeat.yml
setup.dashboards.enabled: true
但现在我明白了:
beat.go:625: CRIT Exiting: Error importing Kibana dashboards: fail to create the Elasticsearch loader: Elasticsearch output is not configured/enabled
Exiting: Error importing Kibana dashboards: fail to create the Elasticsearch loader: Elasticsearch output is not configured/enabled
我的印象是,Logstash 输出就是所需要的,而 Logstash 负责输出到 Elasticsearch。
但是,如果我在 filebeat (/etc/filebeat/filebeat.yml) 中启用 Elasticsearch 输出:
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["localhost:9200"]
我明白了:
beat.go:625: CRIT Exiting: error unpacking config data: more then one namespace configured accessing 'output' (source:'/etc/filebeat/filebeat.yml')
Exiting: error unpacking config data: more then one namespace configured accessing 'output' (source:'/etc/filebeat/filebeat.yml')
【问题讨论】:
标签: elasticsearch logstash filebeat