Erreur filebeat/elasticsearch

Elastic In Your Native Tongue Discussions en français
1

Bonjour,
je tente d'installer sur une redhat (Red Hat Enterprise Linux release 8.3 (Ootpa)) le triplé ealastisearch/filebeat/kibana depuis les infos github (GitHub - molu8bits/squid-filebeat-kibana: Filebeat module for Squid access.log + Kibana dashboards. ELK 7.x).
Lorsque je souhaite démarrer filebeat je rencontre une erreur.
filebeat[1061858]: Exiting: error loading config file: yaml: line 4: mapping values are not allowed in this context
filebeat.service: Main process exited, code=exited, status=1/FAILURE
filebeat.service: Failed with result 'exit-code'.
filebeat.service: Service RestartSec=100ms expired, scheduling restart.
filebeat.service: Scheduled restart job, restart counter is at 5.
filebeat.service: Start request repeated too quickly.
filebeat.service: Failed with result 'exit-code'.

voici le contenu du fichier de config

`
filebeat.inputs:

  • type: log
    enabled: false
    paths:
    • /var/log/*.log

filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: true

setup.template.settings:
index.number_of_shards: 3

setup.dashboards.enabled: true

setup.template.enabled: true
setup.template.json.enabled: false

Both two lines are required to add

setup.template.fields: "${path.config}/fields.yml"
setup.template.overwrite: true

string "eleasticsearch.local" must be replaced with Elasticsearch IP/Host

output.elasticsearch:
hosts: ["ipdemaredhat:9200"]'
`
Merci

2

Bonjour,

Sur le fichier de conf .yml, il faut (deja) que tu change la valeur en enabled à true.
Et comme c'est un fichier YAML, faut bien respecter le syntaxes :

Peux-tu nous mettre la config en utilisant la balise </>

5 
`filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/log/*.log`



`filebeat.config.modules:`

path: ${path.config}/modules.d/*.yml reload.enabled: true

setup.template.settings: index.number_of_shards: 3

setup.dashboards.enabled: true

setup.template.enabled: true setup.template.json.enabled: false

# Both two lines are required to add setup.template.fields: "${path.config}/fields.yml" setup.template.overwrite: true

# string "eleasticsearch.local" must be replaced with Elasticsearch IP/Host output.elasticsearch: hosts: ["monipserveur:9200"]

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.