I am trying to ship logs to logstash from filebeat.
With reference to:
In the filebeat.yml, it says to use this for the host:
output.logstash:
hosts: ["127.0.0.1:5044"]
My logstash URL has /logstash appending onto it:
# The Logstash hosts
hosts: ["10.1.103.92:30090/logstash/"]
If I put this in for the host I get the following error:
2021-01-28T13:04:37.534Z ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(async(tcp://10.1.103.92:30090/logstash/)): dial tcp: lookup tcp/30090/logstash/: Servname not supported for ai_socktype
I think it doesn't like the /logstash part of the url. Is there any way to specify that?
I don't have a choice, it's the way the url is presented from kubernetes. Traffic is routed into the appropriate service using gloo, which distinguishes the various services based on the path it finds in the url, so if the url contains logstash then it knows to route it to the logstash service. I am not sure if I can change it, it's how the different services are presented for example:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.