Failed to start Beats services, including filebeat, topbeat

Elastic Stack Beats
1

HI Team,

I am working on Beats especially with Topbeat and Filebeat. when I am installing services running successfully, but if I modify in configuration file and restart it, then giving the below error.

[root@Vineet47 log]# service filebeat stauts
Usage: /etc/init.d/filebeat {start|stop|status|restart|condrestart}
[root@Vineet47 log]# service filebeat status
filebeat.service - filebeat
   Loaded: loaded (/usr/lib/systemd/system/filebeat.service; enabled)
   Active: failed (Result: start-limit) since Thu 2016-03-31 17:55:12 IST; 1min 12s ago
     Docs: https://www.elastic.co/guide/en/beats/filebeat/current/index.html
 Main PID: 14090 (code=exited, status=1/FAILURE)

Mar 31 17:55:12 Vineet47 systemd[1]: filebeat.service: main process exited, code=exited, status=1/FAILURE
Mar 31 17:55:12 Vineet47 systemd[1]: Unit filebeat.service entered failed state.
Mar 31 17:55:12 Vineet47 systemd[1]: filebeat.service holdoff time over, scheduling restart.
Mar 31 17:55:12 Vineet47 systemd[1]: Stopping filebeat...
Mar 31 17:55:12 Vineet47 systemd[1]: Starting filebeat...
Mar 31 17:55:12 Vineet47 systemd[1]: filebeat.service start request repeated too quickly, refusing to start.
Mar 31 17:55:12 Vineet47 systemd[1]: Failed to start filebeat.
Mar 31 17:55:12 Vineet47 systemd[1]: Unit filebeat.service entered failed state.

Can I should restart the service filebeat or topbeat after changes in configurations? or they take changes automatically?

regards,
sahitya

2

Are there any clues in the Filebeat log?

3

which clue? what is that?

4

Something, for example an error message, that would indicate why Filebeat refuses to start.

5

When I am starting the Filebeats , getting the below error

 service topbeat start
Starting topbeat (via systemctl):                          [  OK  ]
[root@vineet45 topbeat]# service topbeat status
topbeat.service - topbeat
   Loaded: loaded (/usr/lib/systemd/system/topbeat.service; enabled)
   Active: failed (Result: start-limit) since Fri 2016-04-01 04:06:09 EDT; 11s ago
     Docs: https://www.elastic.co/guide/en/beats/topbeat/current/index.html
  Process: 38488 ExecStart=/usr/bin/topbeat -c /etc/topbeat/topbeat.yml (code=exited, status=1/FAILURE)
 Main PID: 38488 (code=exited, status=1/FAILURE)

Apr 01 04:06:09 vineet45 systemd[1]: topbeat.service: main process exited, code=exited, status=1/FAILURE
Apr 01 04:06:09 vineet45 systemd[1]: Unit topbeat.service entered failed state.
Apr 01 04:06:09 vineet45 systemd[1]: topbeat.service holdoff time over, scheduling restart.
Apr 01 04:06:09 vineet45 systemd[1]: Stopping topbeat...
Apr 01 04:06:09 vineet45 systemd[1]: Starting topbeat...
Apr 01 04:06:09 vineet45 systemd[1]: topbeat.service start request repeated too quickly, refusing to start.
Apr 01 04:06:09 vineet45 systemd[1]: Failed to start topbeat.
Apr 01 04:06:09 vineet45 systemd[1]: Unit topbeat.service entered failed state.

and

when I installed it, its working fine!

changed the config file for Logstash as output and restarted it then it giving the above error.

I suspected my self and keep the # in front of all changes what i done. But this error still persists. could you please help me with above error lines.

interestingly, same problem with Topbeat also.

Cheers!
sahitya

6

can you please post the log files written by topbeat/filebeat?