Hi, I'm getting this error from filebeat:
Apr 05 15:14:43 SOMETHING filebeat[410843]: / ____/ _____ ____ / /_/ / / /_ __/ /_ _____
Apr 05 15:14:43 SOMETHING filebeat[410843]: / __/ | | / / _ \/ __ \/ __/ /_/ / / / / __ \/ ___/
Apr 05 15:14:43 SOMETHING filebeat[410843]: / /___ | |/ / __/ / / / /_/ __ / /_/ / /_/ (__ )
Apr 05 15:14:43 SOMETHING filebeat[410843]: /_____/ |___/\___/_/ /_/\__/_/ /_/\__,_/_.___/____/
Apr 05 15:14:43 SOMETHING filebeat[410843]: => processing events, ctrl+c to exit
Apr 05 15:14:43 SOMETHING /usr/share/filebeat/bin/filebeat[410843]: 2021/04/05 15:14:43 ==> REQUEST/RESPONSE (Try=1/6.55729ms, OpTime=6.613691ms) -- REQUEST ERROR
PUT https://SOMETHING.windows.net/filebeat-activitylogs-insights-operational-logs/0?timeout=61
Authorization: REDACTED
Content-Length: [80]
If-None-Match: [*]
User-Agent: [Azure-Storage/0.7 (go1.15.8; linux)]
X-Ms-Blob-Cache-Control: []
X-Ms-Blob-Content-Disposition: []
X-Ms-Blob-Content-Encoding: []
X-Ms-Blob-Content-Language: []
X-Ms-Blob-Content-Type: []
X-Ms-Blob-Type: [BlockBlob]
X-Ms-Client-Request-Id: [2892b0df-ad1a-4e82-7db0-8a757a788fc8]
X-Ms-Version: [2018-11-09]
x-ms-date: [Mon, 05 Apr 2021 15:14:43 GMT]
--------------------------------------------------------------------------------
RESPONSE Status: 409 The specified blob already exists.
Content-Length: [220]
Content-Type: [application/xml]
Date: [Mon, 05 Apr 2021 15:14:42 GMT]
Server: [Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0]
X-Ms-Error-Code: [BlobAlreadyExists]
X-Ms-Request-Id: [4199160b-e01e-000c-0b2e-2ad423000000]
X-Ms-Version: [2018-11-09]
--------------------------------------------------------------------------------
ERROR:
-> github.com/Azure/azure-storage-blob-go/azblob.newStorageError, /go/pkg/mod/github.com/!azure/azure-storage-blob-go@v0.8.0/azbl>
===== RESPONSE ERROR (ServiceCode=BlobAlreadyExists) =====
Description=The specified blob already exists.
RequestId:4199160b-e01e-000c-0b2e-2ad423000000
Time:2021-04-05T15:14:43.7015200Z, Details:
Code: BlobAlreadyExists
PUT https://SOMETHING.windows.net/filebeat-activitylogs-insights-operational-logs/0?timeout=61
Authorization: REDACTED
Content-Length: [80]
If-None-Match: [*]
User-Agent: [Azure-Storage/0.7 (go1.15.8; linux)]
X-Ms-Blob-Cache-Control: []
X-Ms-Blob-Content-Disposition: []
OS: Centos8
Filebeat version: 7.12.0
azure.yml:
- module: azure
# All logs
activitylogs:
enabled: true
var:
# eventhub name containing the activity logs, overwrite he default value if the logs are exported in a different eventhub
eventhub: "SOMETHING"
# consumer group name that has access to the event hub, we advise creating a dedicated consumer group for the azure module
consumer_group: "$Default"
# the connection string required to communicate with Event Hubs, steps to generate one here https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-get-connection-string
connection_string: "Endpoint=sb://SOMETHING.servicebus.windows.net/;SharedAccessKeyName=RootManageSharedAccessKey;SharedAccessKey=KEY"
# the name of the storage account the state/offsets will be stored and updated
storage_account: "ACOUNT"
# the storage account key, this key will be used to authorize access to data in your storage account
storage_account_key: "KEY"
filebeat.yml
filebeat.config.modules:
# Glob pattern for configuration loading
path: ${path.config}/modules.d/*.yml
# Set to true to enable config reloading
reload.enabled: false
# Period on which files under path should be checked for changes
#reload.period: 10s
output.logstash:
# The Logstash hosts
hosts: ["localhost:5547"]