Hello, I am getting this error related to registry file :
│ 2023-08-17T17:23:10.691Z INFO instance/beat.go:297 Setup Beat: filebeat; Version: 7.7.0 │
│ 2023-08-17T17:23:10.692Z INFO [publisher] pipeline/module.go:110 Beat name: filebeat-cnjz4 │
│ 2023-08-17T17:23:10.692Z WARN beater/filebeat.go:152 Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If │
│ 2023-08-17T17:23:10.692Z INFO instance/beat.go:438 filebeat start running. │
│ 2023-08-17T17:23:10.692Z INFO [monitoring] log/log.go:118 Starting metrics logging every 30s │
│ 2023-08-17T17:23:10.692Z ERROR beater/filebeat.go:312 Could not init registrar: registry file version 1 not supported │
│ 2023-08-17T17:23:10.693Z INFO [monitoring] log/log.go:153 Total non-zero metrics {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":30,"time":{"ms":33}},"total":{"ticks":60,"time" │
│ 2023-08-17T17:23:10.693Z INFO [monitoring] log/log.go:154 Uptime: 29.478293ms │
│ 2023-08-17T17:23:10.693Z INFO [monitoring] log/log.go:131 Stopping metrics logging. │
│ 2023-08-17T17:23:10.693Z INFO instance/beat.go:444 filebeat stopped. │
│ Stream closed EOF for default/filebeat-cnjz4 (filebeat)
filebeat-kubernetes.yaml conntains:
---
apiVersion: v1
kind: ConfigMap
metadata:
name: filebeat-config
namespace: {{ .Values.metadata.namespace }}
labels:
k8s-app: filebeat
data:
filebeat.yml: |-
#filebeat.config:
# inputs:
# # Mounted `filebeat-inputs` configmap:
# path: ${path.config}/inputs.d/*.yml
# # Reload inputs configs as they change:
# reload.enabled: false
# To enable hints based autodiscover, remove `filebeat.config.inputs` configuration and uncomment this:
filebeat.autodiscover:
providers:
- type: kubernetes
hints.enabled: true
hints.default_config:
type: container
paths:
- "/var/lib/docker/containers/${data.container.id}/*.log"
parsers:
- multiline:
type: pattern
pattern: '^(([0-9])|([0-2][0-9])|([3][0-1]))\ (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\ \d{4}$'
negate: true
match: after
templates:
- condition:
equals:
kubernetes.container.name: "service"
config:
- type: log
paths:
- "/service/log/${data.kubernetes.pod.name}/*.log"
multiline:
pattern: '^(([0-9])|([0-2][0-9])|([3][0-1]))\ (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\ \d{4}$'
negate: true
match: after
modules:
path: ${path.config}/modules.d/*.yml
# Reload module configs as they change:
reload.enabled: false
output.logstash:
hosts: [{{- join "," .Values.logstash.hosts }}]
loadbalance: true
---
apiVersion: v1
kind: ConfigMap
metadata:
name: filebeat-inputs
namespace: {{ .Values.metadata.namespace }}
labels:
k8s-app: filebeat
data:
kubernetes.yml: |-
- type: docker
harvester_buffer_size: 32768
max_bytes: 41943040
containers.ids:
- "*"
processors:
- add_kubernetes_metadata:
in_cluster: true
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: filebeat
namespace: {{ .Values.metadata.namespace }}
labels:
k8s-app: filebeat
spec:
selector:
matchLabels:
k8s-app: filebeat
template:
metadata:
labels:
k8s-app: filebeat
spec:
serviceAccountName: filebeat
terminationGracePeriodSeconds: 30
containers:
- name: filebeat
image: docker.elastic.co/beats/filebeat:7.7.0
args: [
"-c", "/etc/filebeat.yml",
"-e",
]
env:
securityContext:
runAsUser: 0
resources:
{{ toYaml .Values.filebeat.resources | indent 10 }}
volumeMounts:
- name: config
mountPath: /etc/filebeat.yml
readOnly: true
subPath: filebeat.yml
- name: inputs
mountPath: /usr/share/filebeat/inputs.d
readOnly: true
- name: data
mountPath: /usr/share/filebeat/data
- name: varlibdockercontainers
mountPath: /var/lib/docker/containers
readOnly: true
- name: servicelogs
mountPath: /service/log/
readOnly: true
volumes:
- name: config
configMap:
defaultMode: 0600
name: filebeat-config
- name: inputs
configMap:
defaultMode: 0600
name: filebeat-inputs
# data folder stores a registry of read status for all files, so we don't send everything again on a Filebeat pod restart
- name: data
hostPath:
path: /var/lib/filebeat-data
type: DirectoryOrCreate
- name: varlibdockercontainers
hostPath:
path: /var/lib/docker/containers
- name: servicelogs
hostPath:
path: /service/log/
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: filebeat
labels:
k8s-app: filebeat
subjects:
- kind: ServiceAccount
name: filebeat
namespace: {{ .Values.metadata.namespace }}
roleRef:
kind: ClusterRole
name: filebeat
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: filebeat
labels:
k8s-app: filebeat
rules:
- apiGroups: [""] # "" indicates the core API group
resources:
- namespaces
- pods
verbs:
- get
- watch
- list
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: filebeat
namespace: {{ .Values.metadata.namespace }}
labels:
k8s-app: filebeat
---
Thank you for your support.