Hi,
I am using docker-compose file to bring up Filebeat, Logstash, Elasticsearch & Kibana containers.
I want Filebeat to read logs and export them to Logstash. Need to apply Grok patterns in Logstash.
Getting this error while stating Filebeat container,
2019-11-05T08:54:43.640Z INFO instance/beat.go:369 filebeat stopped.
2019-11-05T08:54:43.640Z ERROR instance/beat.go:911 Exiting: No monitoring reporter configured
Filebeat config is as below,
filebeat.config:
prospectors:
path: ${path.config}/prospectors.d/*.yml
reload.enabled: false
modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
processors:
- add_cloud_metadata:
filebeat.inputs:
- type: log
paths:
- /var/log/*.log
output.logstash:
enabled: true
hosts: ["logstash:5044"]
setup.kibana:
host: "http://kibana:5601"
username: elastic
password: "${ELASTIC_PASSWORD}"
protocol: "http"
ssl.enabled: false
ssl.certificate_authorities: ["/usr/share/filebeat/certs/ca/ca.crt"]
xpack.monitoring.enabled: true
Logstash configuration is given below,
input {
beats {
port => "5044"
}
}
filter {
grok {
match => { "message" => "%{COMBINEDAPACHELOG}"}
}
}
output {
elasticsearch {
hosts => [ 'elasticsearch' ]
user => 'elastic'
password => "${ELASTIC_PASSWORD}" # read password from logstash.keystore
ssl => true
cacert => '/usr/share/logstash/config/certs/ca/ca.crt'
}
}
Is this configuration correct?
Docker images I am using in docker-compose file are,
docker.elastic.co/beats/filebeat:6.6.0
docker.elastic.co/kibana/kibana:6.6.0
docker.elastic.co/logstash/logstash:6.6.0
docker.elastic.co/elasticsearch/elasticsearch:6.6.0