When i am starting the service of filebeat it is giving this error.
Starting filebeat: Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'/etc/filebeat/filebeat.yml')
what we can do to fix this.
When i am starting the service of filebeat it is giving this error.
Starting filebeat: Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'/etc/filebeat/filebeat.yml')
what we can do to fix this.
Can someone tell that what is the issue please it is urgent.
What does you Filebeat config look like? Where are you looking to send the data?
i am sending the data to another server through file beat and in the config file i have changed the logstash ip and port .
Please show the config and make sure you format it correctly using the tools available in the UI.
filebeat.prospectors:
output.logstash:
hosts: ["172.18.7.16:5044"]
~
we have not changed anything in yml file
we created a conf file and there we provided the ip for logstash
Is that the full config file?
###################### Filebeat Configuration Example #########################
#=========================== Filebeat inputs =============================
filebeat.inputs:
type: log
enabled: false
paths:
#exclude_lines: ['^DBG']
#include_lines: ['^ERR', '^WARN']
#exclude_files: ['.gz$']
#fields:
#multiline.pattern: ^[
#multiline.negate: false
#multiline.match: after
#============================= Filebeat modules ===============================
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
#reload.period: 10s
#==================== Elasticsearch template setting ==========================
setup.template.settings:
index.number_of_shards: 3
#index.codec: best_compression
#_source.enabled: false
#================================ General =====================================
#name:
#tags: ["service-X", "web-tier"]
#fields:
#============================== Dashboards =====================================
-setup
CLI flag or the setup
command.#setup.dashboards.enabled: false
#setup.dashboards.url:
#============================== Kibana =====================================
setup.kibana:
#host: "localhost:5601"
#============================= Elastic Cloud ==================================
output.elasticsearch.hosts
andsetup.kibana.host
options.cloud.id
in the Elastic Cloud web UI.#cloud.id:
output.elasticsearch.username
andoutput.elasticsearch.password
settings. The format is <user>:<pass>
.#cloud.auth:
#================================ Outputs =====================================
#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
hosts: ["localhost:9200"]
#protocol: "https"
#username: "elastic"
#password: "changeme"
#----------------------------- Logstash output --------------------------------
output.logstash:
#The Logstash hosts
hosts: ["localhost:5044"]
#ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
#ssl.certificate: "/etc/pki/client/cert.pem"
#ssl.key: "/etc/pki/client/cert.key"
#================================ Logging =====================================
#logging.level: debug
#logging.selectors: ["*"]
that config file was for particular feed.
Because i want the send different feeds that is why we are creating different config file
so that it can load the data to logstash directly with the config file which we have created.
You have both output.elasticsearch
and output.logstash
enabled, which I suspect is causing the problem. Comment out one of these tother with all underlying config to see if that helps. You can only have one output configured at any time.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.