Hello,
We are managing 30+ servers with filebeat configured, but one of them just stops after few minutes. Any guess?
The given error is:Error while initializing input: Can only start an input when all related states are finished
And:Updating ignore_older state error: input outlet closed
Information:
Config
filebeat.inputs:
- type: log
enabled: true
encoding: utf-8
multiline.pattern: '^\d{1,2}\/\d{2}\/\d{4} \d{1,2}:\d{2}:\d{2}'
multiline.negate: true
multiline.match: after
exclude_lines: ['^FECHA\tSERVIDOR\tUSUARIO\tAPLICACION\tHUB\tACTIVIDAD\tID\tFRONTENDID\tMSG_IN_SIZ\tMSG_OUT_SIZ\tSTATUS\tDB2_SER\tDB2_OP\tDB2_SP\tDB2_CT\tDB2_DSR\tDB2_LGN\tDB2_NEG\tSSO\tSQL_SEL\tSQL_INS\tSQL_UPD\tSQL_DEL\tSH\tCRM\tWSE\tACT\tBE', '^FECHA\tHORA\tSERVIDOR\tUSUARIO\tAPLICACION\tHUB\tACTIVIDAD\tID\tFRONTENDID\tMSG_IN_SIZ\tMSG_OUT_SIZ\tSTATUS\tDB2_SER\tDB2_OP\tDB2_SP\tDB2_CT\tDB2_DSR\tDB2_LGN\tDB2_NEG\tSSO\tSQL_SEL\tSQL_INS\tSQL_UPD\tSQL_DEL\tSH\tCRM\tWSE\tACT\tBE', '^\d{2}:\d{2}:\d{2}']
paths:
- D:\Backend\Logs\Rendimiento\Rendimiento*.logshow original
Logs
2020-02-21T08:13:20.386+0100 INFO instance/beat.go:606 Home path: [D:\Filebeat] Config path: [D:\Filebeat] Data path: [D:\Filebeat\data] Logs path: [D:\Filebeat\logs]
2020-02-21T08:13:20.392+0100 INFO instance/beat.go:614 Beat ID: 872dba80-bfc6-44cd-aebe-3e3017bba155
2020-02-21T08:13:20.410+0100 INFO [beat] instance/beat.go:902 Beat info {"system_info": {"beat": {"path": {"config": "D:\\Filebeat", "data": "D:\\Filebeat\\data", "home": "D:\\Filebeat", "logs": "D:\\Filebeat\\logs"}, "type": "filebeat", "uuid": "872dba80-bfc6-44cd-aebe-3e3017bba155"}}}
2020-02-21T08:13:20.410+0100 INFO [beat] instance/beat.go:911 Build info {"system_info": {"build": {"commit": "6f0ec01a0e57fe7d4fd703b017fb5a2f6448d097", "libbeat": "7.3.0", "time": "2019-07-24T17:39:33.000Z", "version": "7.3.0"}}}
2020-02-21T08:13:20.410+0100 INFO [beat] instance/beat.go:914 Go runtime info {"system_info": {"go": {"os":"windows","arch":"amd64","max_procs":8,"version":"go1.12.4"}}}
2020-02-21T08:13:20.411+0100 INFO [beat] instance/beat.go:918 Host info {"system_info": {"host": {"architecture":"x86_64","boot_time":"2020-02-17T10:33:34.12+01:00","name":"grubb","ip":["fe80::655a:5c0:2fec:6dfa/64","10.201.64.141/17","::1/128","127.0.0.1/8","fe80::5efe:ac9:408d/128","fe80::100:7f:fffe/64"],"kernel_version":"6.1.7601.24545 (win7sp1_ldr_escrow.200102-1707)","mac":["02:ff:0a:c9:40:8d","00:00:00:00:00:00:00:e0","00:00:00:00:00:00:00:e0"],"os":{"family":"windows","platform":"windows","name":"Windows Server 2008 R2 Standard","version":"6.1","major":1,"minor":0,"patch":0,"build":"7601.24544"},"timezone":"CET","timezone_offset_sec":3600,"id":"d9733c8a-a138-4ff9-aee7-4732ef86f902"}}}
2020-02-21T08:13:20.413+0100 INFO [beat] instance/beat.go:947 Process info {"system_info": {"process": {"cwd": "C:\\Windows\\system32", "exe": "D:\\Filebeat\\filebeat.exe", "name": "filebeat.exe", "pid": 63576, "ppid": 688, "start_time": "2020-02-21T08:13:20.330+0100"}}}
2020-02-21T08:13:20.413+0100 INFO instance/beat.go:292 Setup Beat: filebeat; Version: 7.3.0
2020-02-21T08:13:20.414+0100 INFO [index-management] idxmgmt/std.go:178 Set output.elasticsearch.index to 'filebeat-fwk-be' as ILM is enabled.
2020-02-21T08:13:20.415+0100 INFO elasticsearch/client.go:170 Elasticsearch url: https://elasticsearch-ingest:9200show original