Filebeat not coming up

Elastic Stack Beats
1

Hi Team,

Filebeat is not coming up.

Getting below error in the logs -
2018-05-29T15:55:52-04:00 INFO Setup Beat: filebeat; Version: 5.1.1
2018-05-29T15:55:52-04:00 INFO Max Retries set to: 3
2018-05-29T15:55:52-04:00 ERR failed to initialize logstash plugin as output: missing required field accessing 'output.logstash.hosts'
2018-05-29T15:55:52-04:00 CRIT Exiting: error initializing publisher: missing required field accessing 'output.logstash.hosts'

Any idea what is wrong ?

just an FYI - Here is the logstash section in filebeat.yml
output.logstash:

The Logstash hosts

hosts: ["10.133.188.252:5443"]
bulk_max_size: 1024
ssl.certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"]
template.name: "filebeat"
template.path: "filebeat.template.json"
template.overwrite: false

Kind Regards,
Asif Bhat

2

Hello @abhat ,

This error will come when you wrongly configured the output.logstash. Due to indentation problem in filebeat.yml this kind of error may occurs

Kindly share your filebeat.yml file as it is. It will be very helpful to understand the formatting problem in config file.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.