Filebeat setup encounters bad json, but doesn't tell me what the problem is?

krainboltgreene · November 22, 2019, 8:37pm

gist.github.com

https://gist.github.com/krainboltgreene/2d2894753edf270ad581877de987106d

response.json

{
	"name": "kibana.mops.example.com",
	"uuid": "0cf8c51c-2fd7-4090-ac1b-eb032a19041e",
	"version": {
		"number": "7.4.2",
		"build_hash": "d7f39418dcaf7a243158b89f84bb82f39b04e5e5",
		"build_number": 26506,
		"build_snapshot": false
	},
	"status": {

This file has been truncated. show original

setup

$ sudo filebeat setup -e
2019-11-22T20:33:46.860Z	INFO	instance/beat.go:607	Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
2019-11-22T20:33:46.861Z	INFO	instance/beat.go:615	Beat ID: b3f1efc7-a6b2-441e-9ad0-c32c7fc354ac
2019-11-22T20:33:46.861Z	INFO	[beat]	instance/beat.go:903	Beat info	{"system_info": {"beat": {"path": {"config": "/etc/filebeat", "data": "/var/lib/filebeat", "home": "/usr/share/filebeat", "logs": "/var/log/filebeat"}, "type": "filebeat", "uuid": "b3f1efc7-a6b2-441e-9ad0-c32c7fc354ac"}}}
2019-11-22T20:33:46.861Z	INFO	[beat]	instance/beat.go:912	Build info	{"system_info": {"build": {"commit": "15075156388b44390301f070960fd8aeac1c9712", "libbeat": "7.4.2", "time": "2019-10-28T19:46:13.000Z", "version": "7.4.2"}}}
2019-11-22T20:33:46.861Z	INFO	[beat]	instance/beat.go:915	Go runtime info	{"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":2,"version":"go1.12.9"}}}
2019-11-22T20:33:46.862Z	INFO	[beat]	instance/beat.go:919	Host info	{"system_info": {"host": {"architecture":"x86_64","boot_time":"2019-10-29T22:27:47Z","containerized":false,"name":"la-eq-mops-docker-registry-node-0","ip":["127.0.0.1/8","::1/128","10.16.241.82/22","fe80::250:56ff:fea5:b087/64"],"kernel_version":"4.18.0-22-generic","mac":["00:50:56:a5:b0:87"],"os":{"family":"debian","platform":"ubuntu","name":"Ubuntu","version":"18.04.2 LTS (Bionic Beaver)","major":18,"minor":4,"patch":2,"codename":"bionic"},"timezone":"UTC","timezone_offset_sec":0,"id":"62f09d80ff744e89b630873d35522246"}}}
2019-11-22T20:33:46.863Z	INFO	[beat]	instance/beat.go:948	Process info	{"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"ambient":null}, "cwd": "/home/localadmin", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 9255, "ppid": 9254, "seccomp": {"mode":"disabled","no_new_privs":false}, "start_time": "2019-11-22T20:33:46.640Z"}}}
2019-11-22T20:33:46.863Z	INFO	instance/beat.go:292	Setup Beat: filebeat; Version: 7.4.2
2019-11-22T20:33:46.864Z	INFO	[index-management]	idxmgmt/std.go:178	Set output.elasticsearch.index to 'filebeat-7.4.2' as ILM is enabled.

This file has been truncated. show original

krainboltgreene · November 22, 2019, 10:33pm

Strangely, it looks like it's trying to request the host kibana.mops.example.com:443 instead of using it as the port.

kvch · November 28, 2019, 3:14pm

Could you please share the configuration and the debug output of setup? (./filebeat setup -e -d "*")

system · December 26, 2019, 3:14pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Filebeat is not sending Json data to Elasticsearch Beats filebeat	5	1780	November 9, 2017
Filebeat 6.2.4 not processing JSON log and not submitting to Logstsash Beats filebeat	3	944	June 7, 2018
How to read json file using filebeat and send it to elasticsearch Beats	28	43387	July 25, 2017
Filebeat test config failing Beats filebeat	2	356	January 13, 2019
Failed to parse JSON response: json: cannot unmarshal string into Go struct field .Version of type struct { Number string }] Beats filebeat	17	5592	February 8, 2019

Filebeat setup encounters bad json, but doesn't tell me what the problem is?

Related topics