Thanks for looking into this. This was working fine in our old version of elasticsearch 7.6.2. So i tried installed 7.6.2 filebeat and point it to the new elasticsearch cluster , but still no logs. Please find the answers below
If i change the time future also nothing is shown.
Blockquote
{
"took" : 2,
"timed_out" : false,
"_shards" : {
"total" : 1,
"successful" : 1,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 10000,
"relation" : "gte"
},
"max_score" : 1.0,
"hits" : [
{
"_index" : "ibmmq-dc-2020.12.03-000001",
"_type" : "_doc",
"_id" : "GJYpKnYBT0aBwEH4afce",
"_score" : 1.0,
"_source" : {
"agent" : {
"hostname" : "ash3-hostb",
"id" : "b58ebff3-3876-45ae-9230-d23e3017eee3",
"type" : "filebeat",
"ephemeral_id" : "e8b76c93-48ef-4f32-9d17-1c8ee9da5201",
"version" : "7.6.2"
},
"process" : {
"pid" : "10881.4",
"title" : "amqzmur0"
},
"log" : {
"file" : {
"path" : "/mq/iflyres/RESBV_MQP1/data/RESBV_MQP1/errors/AMQERR02.LOG"
},
"offset" : 0,
"flags" : [
"multiline"
]
},
"fileset" : {
"name" : "errorlog"
},
"message" : "WebSphere MQ V8.0.0.4 (p800-004-151017).",
"ibmmq" : {
"errorlog" : {
"qmgr" : "RESBV_MQP1",
"code" : "AMQ6287",
"commentinsert" : [
"",
"",
""
],
"installation" : "Installation1",
"action" : "Host Info :- Linux 4.1.12-124.42.3.el7uek.x86_64 (MQ Linux (x86-64 platform) 64-bit) Installation :- /projects/mqm/applns/mq_v8 (Installation1) Version :- 8.0.0.4 (p800-004-151017) ACTION: None.",
"arithinsert" : [
"",
""
],
"explanation" : "WebSphere MQ system"
}
},
"input" : {
"type" : "log"
},
"ecs" : {
"version" : "1.4.0"
},
"service" : {
"type" : "ibmmq",
"version" : "8.0.0.4"
},
"host" : {
"hostname" : "ash3-hostb",
"os" : {
"kernel" : "4.1.12-124.42.3.el7uek.x86_64",
"name" : "Oracle Linux Server",
"family" : "",
"version" : "7.8",
"platform" : "ol"
},
"containerized" : false,
"name" : "ash3-hostb",
"id" : "7712548109ff4992a8fd44b79c66d65f",
"architecture" : "x86_64"
},
"event" : {
"created" : "2020-12-03T19:52:59.606Z",
"module" : "ibmmq",
"dataset" : "ibmmq.errorlog"
},
"user" : {
"name" : "mqm"
}
}
},
{
"_index" : "ibmmq-dc-2020.12.03-000001",
"_type" : "_doc",
"_id" : "GZYpKnYBT0aBwEH4afce",
"_score" : 1.0,
"_source" : {
"agent" : {
"hostname" : "ash3-hostb",
"id" : "b58ebff3-3876-45ae-9230-d23e3017eee3",
"type" : "filebeat",
"ephemeral_id" : "e8b76c93-48ef-4f32-9d17-1c8ee9da5201",
"version" : "7.6.2"
},
"process" : {
"pid" : "10957.8413",
"title" : "amqrmppa"
},
"log" : {
"file" : {
"path" : "/mq/iflyres/RESBV_MQP1/data/RESBV_MQP1/errors/AMQERR02.LOG"
},
"offset" : 528,
"flags" : [
"multiline"
]
},
"fileset" : {
"name" : "errorlog"
},
"message" : "Queue Manager User ID initialization failed for 'mqm'.",
"ibmmq" : {
"errorlog" : {
"qmgr" : "RESBV_MQP1",
"code" : "AMQ9557",
"commentinsert" : [
"",
"",
""
],
"installation" : "Installation1",
"action" : "Correct the error and try again.",
"arithinsert" : [
"",
""
],
"explanation" : "The call to initialize the User ID 'mqm' failed with CompCode 2 and Reason 2035."
}
},