Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')

Hi All

I am new ELK user, and I install Elasticsearch 7.1,Kibana 7.1,Filebeat 7.1 in Redhat 6.8 by vmware.
I use default config of elasticsearch.yml ,kibana.

filebeat.yml below

configuration file.

#=========================== Filebeat inputs =============================

filebeat.inputs:

  • type: log
    enabled: ture

    • /var/log/*.log
      #- c:\programdata\elasticsearch\logs*

    Exclude lines. A list of regular expressions to match. It drops the lines that are

    matching any regular expression from the list.

    #exclude_lines: ['^DBG']

    Include lines. A list of regular expressions to match. It exports the lines that are

    matching any regular expression from the list.

    #include_lines: ['^ERR', '^WARN']

    Exclude files. A list of regular expressions to match. Filebeat drops the files that

    are matching any regular expression from the list. By default, no files are dropped.

    #exclude_files: ['.gz$']

    Optional additional fields. These fields can be freely picked

    to add additional information to the crawled log files for filtering

    #fields:

    level: debug

    review: 1

    Multiline options

    Multiline can be used for log messages spanning multiple lines. This is common

    for Java Stack Traces or C-Line Continuation

    The regexp Pattern that has to be matched. The example pattern matches all lines starting with [

    #multiline.pattern: ^[

    Defines if the pattern set under pattern should be negated or not. Default is false.

    #multiline.negate: false

    Match can be set to "after" or "before". It is used to define if lines should be append to a pattern

    that was (not) matched before or after or as long as a pattern is not matched based on negate.

    Note: After is the equivalent to previous and before is the equivalent to to next in Logstash

    #multiline.match: after

#============================= Filebeat modules ===============================

filebeat.config.modules:

Glob pattern for configuration loading

path: ${path.config}/modules.d/*.yml

Set to true to enable config reloading

reload.enabled: false

Period on which files under path should be checked for changes

#reload.period: 10s

#==================== Elasticsearch template setting ==========================

setup.template.settings:
index.number_of_shards: 1
#index.codec: best_compression
#_source.enabled: false

#================================ General =====================================

The name of the shipper that publishes the network data. It can be used to group

all the transactions sent by a single shipper in the web interface.

#name:

The tags of the shipper are included in their own field with each

transaction published.

#tags: ["service-X", "web-tier"]

Optional fields that you can specify to add additional information to the

output.

#fields:

env: staging

#============================== Dashboards =====================================

These settings control loading the sample dashboards to the Kibana index. Loading

the dashboards is disabled by default and can be enabled either by setting the

options here or by using the setup command.

#setup.dashboards.enabled: false

The URL from where to download the dashboards archive. By default this URL

has a value which is computed based on the Beat name and version. For released

versions, this URL points to the dashboard archive on the artifacts.elastic.co

website.

#setup.dashboards.url:

#============================== Kibana =====================================

Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.

This requires a Kibana endpoint configuration.

setup.kibana:

Kibana Host

Scheme and port can be left out and will be set to the default (http and 5601)

In case you specify and additional path, the scheme is required: http://localhost:5601/path

IPv6 addresses should always be defined as: https://[2001:db8::1]:5601

host: "192.168.108.170:5601"

Kibana Space ID

ID of the Kibana Space into which the dashboards should be loaded. By default,

the Default Space will be used.

#space.id:

#============================= Elastic Cloud ==================================

These settings simplify using filebeat with the Elastic Cloud (https://cloud.elastic.co/).

The cloud.id setting overwrites the output.elasticsearch.hosts and

setup.kibana.host options.

You can find the cloud.id in the Elastic Cloud web UI.

#cloud.id:

The cloud.auth setting overwrites the output.elasticsearch.username and

output.elasticsearch.password settings. The format is <user>:<pass>.

#cloud.auth:

#================================ Outputs =====================================

Configure what output to use when sending the data collected by the beat.

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:

Array of hosts to connect to.

hosts: ["http://192.168.108.170:9200"]

Optional protocol and basic auth credentials.

#protocol: "https"
#username: "elastic"
#password: "changeme"

#----------------------------- Logstash output --------------------------------
#output.logstash:

The Logstash hosts

#hosts: ["localhost:5044"]

Optional SSL. By default is off.

List of root certificates for HTTPS server verifications

#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]

Certificate for SSL client authentication

#ssl.certificate: "/etc/pki/client/cert.pem"

Client Certificate Key

#ssl.key: "/etc/pki/client/cert.key"

Configure processors to enhance or manipulate events generated by the beat.

processors:

  • add_host_metadata: ~
  • add_cloud_metadata: ~

I can run elasticsearch and kibana ok in browser but filebeat can not the error message below

2019-05-27T13:39:06.232+0800 INFO [publisher] pipeline/module.go:97 Beat name: localhost.localdomain
2019-05-27T13:39:06.233+0800 INFO [monitoring] log/log.go:117 Starting metrics logging every 30s
2019-05-27T13:39:06.233+0800 INFO instance/beat.go:391 filebeat start running.
2019-05-27T13:39:06.233+0800 INFO registrar/registrar.go:145
2019-05-27T13:39:06.254+0800 INFO [monitoring] log/log.go:153 Uptime: 53.891854ms
2019-05-27T13:39:06.254+0800 INFO [monitoring] log/log.go:130 Stopping metrics logging.
2019-05-27T13:39:06.254+0800 INFO instance/beat.go:401 filebeat stopped.
2019-05-27T13:39:06.254+0800 ERROR instance/beat.go:802 Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')
Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')

I try filebeat 1 week,
please help me.

thanks

Hi All

this my debug log

filebeat -e -d "*"
2019-05-27T14:04:31.551+0800 INFO instance/beat.go:571 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
2019-05-27T14:04:31.551+0800 DEBUG [beat] instance/beat.go:623 Beat metadata path: /var/lib/filebeat/meta.json
2019-05-27T14:04:31.551+0800 INFO instance/beat.go:579 Beat ID: 510d31f3-5c67-4c57-8955-f70faec37950
2019-05-27T14:04:31.551+0800 INFO [index-management.ilm] ilm/ilm.go:129 Policy name: filebeat-7.1.0
2019-05-27T14:04:31.554+0800 DEBUG [filters] add_cloud_metadata/add_cloud_metadata.go:164 add_cloud_metadata: starting to fetch metadata, timeout=3s
2019-05-27T14:04:31.636+0800 DEBUG [filters] add_cloud_metadata/add_cloud_metadata.go:196 add_cloud_metadata: received disposition for qcloud after 82.617365ms. result=[provider:qcloud, error=failed requesting qcloud metadata: Get http://metadata.tencentyun.com/meta-data/instance-id: dial tcp: lookup metadata.tencentyun.com on 8.8.8.8:53: no such host, metadata={}]
2019-05-27T14:04:34.554+0800 DEBUG [filters] add_cloud_metadata/add_cloud_metadata.go:203 add_cloud_metadata: timed-out waiting for all responses
2019-05-27T14:04:34.554+0800 DEBUG [filters] add_cloud_metadata/add_cloud_metadata.go:167 add_cloud_metadata: fetchMetadata ran for 3.000392508s
2019-05-27T14:04:34.554+0800 INFO add_cloud_metadata/add_cloud_metadata.go:346 add_cloud_metadata: hosting provider type not detected.
2019-05-27T14:04:34.554+0800 DEBUG [processors] processors/processor.go:66 Processors: add_host_metadata=[netinfo.enabled=[false], cache.ttl=[5m0s]], add_cloud_metadata=null
2019-05-27T14:04:34.554+0800 INFO [seccomp] seccomp/seccomp.go:93 Syscall filter could not be installed because the kernel does not support seccomp
2019-05-27T14:04:34.554+0800 INFO [beat] instance/beat.go:827 Beat info {"system_info": {"beat": {"path": {"config": "/etc/filebeat", "data": "/var/lib/filebeat", "home": "/usr/share/filebeat", "logs": "/var/log/filebeat"}, "type": "filebeat", "uuid": "510d31f3-5c67-4c57-8955-f70faec37950"}}}
2019-05-27T14:04:34.554+0800 INFO [beat] instance/beat.go:836 Build info {"system_info": {"build": {"commit": "03b3db2a1d9d76fdf10475e829fce436c61901e4", "libbeat": "7.1.0", "time": "2019-05-15T23:59:19.000Z", "version": "7.1.0"}}}
2019-05-27T14:04:34.554+0800 INFO [beat] instance/beat.go:839 Go runtime info {"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":2,"version":"go1.11.5"}}}
2019-05-27T14:04:34.555+0800 INFO [beat] instance/beat.go:843 Host info {"system_info": {"host": {"architecture":"x86_64","boot_time":"2019-05-23T13:17:15+08:00","containerized":true,"name":"localhost.localdomain","ip":["127.0.0.1/8","::1/128","192.168.108.170/24","fe80::250:56ff:fea9:ebe8/64"],"kernel_version":"2.6.32-754.14.2.el6.x86_64","mac":["00:50:56:a9:eb:e8"],"os":{"family":"redhat","platform":"redhat","name":"Red","version":"6.10 (Santiago)","major":6,"minor":10,"patch":0,"codename":"Santiago"},"timezone":"+08","timezone_offset_sec":28800,"id":"1c09ddff4fe72d184d9ea97d00000015"}}}
2019-05-27T14:04:34.556+0800 INFO [beat] instance/beat.go:872 Process info {"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read","38","39","40","41","42","43","44","45","46","47","48","49","50","51","52","53","54","55","56","57","58","59","60","61","62","63"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read","38","39","40","41","42","43","44","45","46","47","48","49","50","51","52","53","54","55","56","57","58","59","60","61","62","63"],"bounding":

continued on the next page

thanks

["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read","38","39","40","41","42","43","44","45","46","47","48","49","50","51","52","53","54","55","56","57","58","59","60","61","62","63"],"ambient":null}, "cwd": "/root", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 5165, "ppid": 3828, "seccomp": {"mode":""}, "start_time": "2019-05-27T14:04:30.720+0800"}}}
2019-05-27T14:04:34.556+0800 INFO instance/beat.go:280 Setup Beat: filebeat; Version: 7.1.0
2019-05-27T14:04:34.556+0800 DEBUG [beat] instance/beat.go:301 Initializing output plugins
2019-05-27T14:04:34.556+0800 INFO [index-management] idxmgmt/std.go:165 Set output.elasticsearch.index to 'filebeat-7.1.0' as ILM is enabled.
2019-05-27T14:04:34.556+0800 INFO elasticsearch/client.go:165 Elasticsearch url: http://192.168.108.170:9200
2019-05-27T14:04:34.556+0800 DEBUG [publisher] pipeline/consumer.go:137start pipeline event consumer
2019-05-27T14:04:34.556+0800 INFO [publisher] pipeline/module.go:97 Beat name: localhost.localdomain
2019-05-27T14:04:34.557+0800 INFO instance/beat.go:391 filebeat start running.
2019-05-27T14:04:34.557+0800 INFO [monitoring] log/log.go:117 Starting metrics logging every 30s
2019-05-27T14:04:34.557+0800 DEBUG [test] registrar/migrate.go:159 isFile(/var/lib/filebeat/registry) -> false
2019-05-27T14:04:34.557+0800 DEBUG [test] registrar/migrate.go:159 isFile() -> false
2019-05-27T14:04:34.557+0800 DEBUG [test] registrar/migrate.go:152 isDir(/var/lib/filebeat/registry/filebeat) -> true
2019-05-27T14:04:34.557+0800 DEBUG [test] registrar/migrate.go:159 isFile(/var/lib/filebeat/registry/filebeat/meta.json) -> true
2019-05-27T14:04:34.557+0800 DEBUG [registrar] registrar/migrate.go:51Registry type '0' found
2019-05-27T14:04:34.557+0800 DEBUG [registrar] registrar/registrar.go:125 Registry file set to: /var/lib/filebeat/registry/filebeat/data.json
2019-05-27T14:04:34.557+0800 INFO registrar/registrar.go:145 Loading registrar data from /var/lib/filebeat/registry/filebeat/data.json
2019-05-27T14:04:34.557+0800 INFO registrar/registrar.go:152 States Loaded from registrar: 0
2019-05-27T14:04:34.557+0800 INFO crawler/crawler.go:72 Loading Inputs: 1
2019-05-27T14:04:34.557+0800 DEBUG [processors] processors/processor.go:66 Processors:
2019-05-27T14:04:34.557+0800 INFO crawler/crawler.go:139 Stopping Crawler
2019-05-27T14:04:34.557+0800 INFO crawler/crawler.go:149 Stopping 0 inputs
2019-05-27T14:04:34.557+0800 INFO crawler/crawler.go:165 Crawler stopped
2019-05-27T14:04:34.557+0800 INFO registrar/registrar.go:367 Stopping Registrar
2019-05-27T14:04:34.558+0800 DEBUG [registrar] registrar/registrar.go:278 Starting Registrar
2019-05-27T14:04:34.558+0800 INFO registrar/registrar.go:293 Ending Registrar
2019-05-27T14:04:34.558+0800 DEBUG [registrar] registrar/registrar.go:411 Write registry file: /var/lib/filebeat/registry/filebeat/data.json
2019-05-27T14:04:34.563+0800 DEBUG [publisher] pipeline/client.go:149 client: closing acker
2019-05-27T14:04:34.563+0800 DEBUG [publisher] pipeline/client.go:151 client: done closing acker
2019-05-27T14:04:34.563+0800 DEBUG [publisher] pipeline/client.go:155 client: cancelled 0 events
2019-05-27T14:04:34.566+0800 DEBUG [registrar] registrar/registrar.go:404 Registry file updated. 0 states written.
2019-05-27T14:04:34.568+0800 INFO [monitoring] log/log.go:152 Total non-zero metrics {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":0,"time":{"ms":9}},"total":{"ticks":30,"time":{"ms":39},"value":30},"user":{"ticks":30,"time":{"ms":30}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":6},"info":{"ephemeral_id":"99bcb254-3556-4c3e-a13c-877783c4d218","uptime":{"ms":3053}},"memstats":{"gc_next":4194304,"memory_alloc":2157688,"memory_total":6209080,"rss":20471808}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"type":"elasticsearch"},"pipeline":{"clients":0,"events":{"active":0}}},"registrar":{"states":{"current":0},"writes":{"success":1,"total":1}},"system":{"cpu":{"cores":2},"load":{"1":0.01,"15":0,"5":0.02,"norm":{"1":0.005,"15":0,"5":0.01}}}}}}
2019-05-27T14:04:34.568+0800 INFO [monitoring] log/log.go:153 Uptime: 3.055067448s
2019-05-27T14:04:34.568+0800 INFO [monitoring] log/log.go:130 Stopping metrics logging.
2019-05-27T14:04:34.568+0800 INFO instance/beat.go:401 filebeat stopped.
2019-05-27T14:04:34.568+0800 ERROR instance/beat.go:802 Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')
Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')

thanks

enabled: ture

Exiting: Error while initializing input: can not convert 'string' into 'bool' accessing 'filebeat.inputs.0.enabled' (source:'/etc/filebeat/filebeat.yml')

The logs are pretty much dead on.
If you're confused by what the 0 means in filebeat.inputs.0.enabled it refers to the index position of the input definition in the list of input definition in your config file.

Also please edit your posts and format them correctly so they are readable. code and config and such needs to be formatted with triple back ticks or with the button </>. If you check the preview you'll see it will become readable and true to the originals, which is the goal.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.