I updated filebeat to version 5.3.0 on a linux server (Ubuntu 16.04 LTS).
I wanted to enable the module nginx; but I got an this error (when executing filebeat as a service).
2017-03-30T11:41:38+02:00 INFO Metrics logging every 30s
2017-03-30T11:41:38+02:00 INFO Flush Interval set to: 1s
2017-03-30T11:41:38+02:00 INFO Max Bulk Size set to: 2048
2017-03-30T11:41:38+02:00 CRIT Exiting: Error reading fileset nginx/access: Error reading manifest file: config file ("/usr/share/filebeat/module/nginx/access/manifest.yml") can only be writable by the owner but the permissions are "-rw-rw-r--" (to fix the permissions use: 'chmod go-w /usr/share/filebeat/module/nginx/access/manifest.yml')
Changing permissions doesn't solve the problem.
I'm "noob" with ELK ; I installed version 5.2.0 first ( I was "waiting" for nginx module before going deeper in configuration).
So I uninstalled filebeat package and reinstalled it. But it doesn't work better.
If I execute filebeat manually, the problem doesn't happen (I'm not sure since it's really verbose)
Output below (I don't have remove w permission for group ; I've done it before re-installing the package):
root@universe:/var/log/filebeat# ls -la /usr/share/filebeat/module/nginx/access/
total 20
drwxrwxr-x 4 root root 4096 mars 30 10:04 .
drwxrwxr-x 4 root root 4096 mars 30 10:04 ..
drwxrwxr-x 2 root root 4096 mars 30 10:04 config
drwxrwxr-x 2 root root 4096 mars 30 10:04 ingest
-rw-rw-r-- 1 root root 395 mars 23 04:09 manifest.yml
Edit: about the tutorial
I've encoutered another problem: It seems that the "var.paths" config key has a wrong syntax. Copy/past the one given in tutorial doesn't work and complain about "list format". But if i'm right, the documentation about conf files "validate" the tutorial.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.