Filebeat starting error

Elastic Stack Beats
1

Hi please suggest me when i starting the filebeat i m getting the below error .

filebeat.service - filebeat
Loaded: loaded (/usr/lib/systemd/system/filebeat.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Fri 2019-04-26 12:13:09 IST; 3s ago
Docs: https://www.elastic.co/guide/en/beats/filebeat/current/index.html
Process: 29450 ExecStart=/usr/bin/filebeat -c /etc/filebeat/filebeat.yml (code=exited, status=1/FAILURE)
Main PID: 29450 (code=exited, status=1/FAILURE)

Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: filebeat.service: main process exited, code=exited, status=1/FAILURE
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: Unit filebeat.service entered failed state.
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: filebeat.service failed.
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: filebeat.service holdoff time over, scheduling restart.
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: start request repeated too quickly for filebeat.service
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: Failed to start filebeat.
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: Unit filebeat.service entered failed state.
Apr 26 12:13:09 ip-172-31-23-198.ap-south-1.compute.internal systemd[1]: filebeat.service failed.
Hint: Some lines were ellipsized, use -l to show in full.

2

HI @Amit_Yadav,

Could you please paste your filebeat.yml file here.

Regards,
Harsh Bajaj

3

Please download the filebeat.yml file using below link

4

Hi,

Please check /var/log/messages while starting filebeat service and let me know the error which you getting.

Regards,
Harsh Bajaj

5

Apr 26 15:23:49 ip-172-31-23-198 filebeat: Error Initialising publisher: No outputs are defined. Please define one under the output section.
Apr 26 15:23:49 ip-172-31-23-198 systemd: filebeat.service: main process exited, code=exited, status=1/FAILURE
Apr 26 15:23:49 ip-172-31-23-198 systemd: Unit filebeat.service entered failed state.
Apr 26 15:23:49 ip-172-31-23-198 systemd: filebeat.service failed.
Apr 26 15:23:49 ip-172-31-23-198 systemd: filebeat.service holdoff time over, scheduling restart.
Apr 26 15:23:49 ip-172-31-23-198 systemd: Started filebeat.
Apr 26 15:23:49 ip-172-31-23-198 systemd: Starting filebeat...
Apr 26 15:23:49 ip-172-31-23-198 filebeat: Error Initialising publisher: No outputs are defined. Please define one under the output section.
Apr 26 15:23:49 ip-172-31-23-198 /usr/bin/filebeat[31208]: beat.go:161: No outputs are defined. Please define one under the output section.
Apr 26 15:23:49 ip-172-31-23-198 systemd: filebeat.service: main process exited, code=exited, status=1/FAILURE
Apr 26 15:23:49 ip-172-31-23-198 systemd: Unit filebeat.service entered failed state.
Apr 26 15:23:49 ip-172-31-23-198 systemd: filebeat.service failed.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service holdoff time over, scheduling restart.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Started filebeat.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Starting filebeat...
Apr 26 15:23:50 ip-172-31-23-198 filebeat: Error Initialising publisher: No outputs are defined. Please define one under the output section.
Apr 26 15:23:50 ip-172-31-23-198 /usr/bin/filebeat[31214]: beat.go:161: No outputs are defined. Please define one under the output section.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service: main process exited, code=exited, status=1/FAILURE
Apr 26 15:23:50 ip-172-31-23-198 systemd: Unit filebeat.service entered failed state.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service failed.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service holdoff time over, scheduling restart.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Started filebeat.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Starting filebeat...
Apr 26 15:23:50 ip-172-31-23-198 filebeat: Error Initialising publisher: No outputs are defined. Please define one under the output section.
Apr 26 15:23:50 ip-172-31-23-198 /usr/bin/filebeat[31220]: beat.go:161: No outputs are defined. Please define one under the output section.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service: main process exited, code=exited, status=1/FAILURE
Apr 26 15:23:50 ip-172-31-23-198 systemd: Unit filebeat.service entered failed state.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service failed.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service holdoff time over, scheduling restart.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Started filebeat.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Starting filebeat...
Apr 26 15:23:50 ip-172-31-23-198 filebeat: Error Initialising publisher: No outputs are defined. Please define one under the output section.
Apr 26 15:23:50 ip-172-31-23-198 /usr/bin/filebeat[31226]: beat.go:161: No outputs are defined. Please define one under the output section.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service: main process exited, code=exited, status=1/FAILURE
Apr 26 15:23:50 ip-172-31-23-198 systemd: Unit filebeat.service entered failed state.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service failed.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service holdoff time over, scheduling restart.
Apr 26 15:23:50 ip-172-31-23-198 systemd: start request repeated too quickly for filebeat.service
Apr 26 15:23:50 ip-172-31-23-198 systemd: Failed to start filebeat.
Apr 26 15:23:50 ip-172-31-23-198 systemd: Unit filebeat.service entered failed state.
Apr 26 15:23:50 ip-172-31-23-198 systemd: filebeat.service failed.

6

filebeat is running now

but when i m hitting below curl in server side getting this

curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'
{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 0,
"successful" : 0,
"failed" : 0
},
"hits" : {
"total" : 0,
"max_score" : 0.0,
"hits" :
}
}

7

My log type is this

log-lobby-1_Apr-26-2019.out

in filebeat i m using like this

/home/logs/*

please let me know what should i used in kibana gui to search index

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.