Filebeat giving error on start - Unable to read file at end


(Varun Kapoor) #1

Hi

Whenever I am starting the file beat it gives me following error

2016-05-31T09:24:09Z INFO Harvester started for file: -
2016-05-31T09:24:09Z ERR Unexpected state reading from /dev/stdin; error: read /dev/stdin: resource temporarily unavailable
2016-05-31T09:24:09Z INFO Read line error: read /dev/stdin: resource temporarily unavailable

I am using input_type: stdin

I am using Filebeat - 1.2.3
OS: Ubuntu 14.04 - 64 Bit

My Config File

    -
      paths:
        - /var/www/vhosts/xyz/app/tmp/logs/debug.log
      document_type: api-cake-debug
      input_type: stdin
    -
      paths:
        - /var/www/vhosts/xyz/app/tmp/logs/error.log
      document_type: api-cake-error
      input_type: stdin
    -
      paths:
        - /var/www/vhosts/xyz/app/tmp/logs/api.log
      document_type: api-app
      input_type: stdin
    -
      paths:
        - /var/www/vhosts/xyz/tmp/logs/debug.log
      document_type: app-cake-debug
      input_type: stdin
    -
      paths:
        - /var/www/vhosts/xyz/tmp/logs/error.log
      document_type: app-cake-error
      input_type: stdin

(Steffen Siering) #2

why do you use input_type: stdin? Using stding + paths doesn't make much sense to me. Is filebeat started as service? If so, stdin might be closed.


(Varun Kapoor) #3

Yes, filebeat is started as service. I didnt get how stdin might be closed in this case?


(Varun Kapoor) #4

@steffens: I have setup the same on 1.1.2 i.e. with input_type:stdin and it was working fine with it. Don't know what's wrong with this one?


(Steffen Siering) #5

no idea how it used to work with 'stdin' (@ruflin any idea?). Change input_type to input_type:log.


(Varun Kapoor) #6

I used stdin then as my log were multiline. Now when i change stdin to log, it starts sending me line by line instead of complete error in a one go.


(Steffen Siering) #7

the input_type is fully independent of multiline. I don't even see any multiline configured in your sample config.


(system) #8