Hi All
I have configured elasticsearch, kibana and fileebeat
Kibana version number: "8.3.3"
Elasticsearch version number : "8.3.3"
Filebeat version number : "8.3.3"
I am able to login in Kibana Web UI and not able see any index idata n kibana.
I am getting below error message during kibana startup and not able see any index in kibana.
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-08-22T09:19:57.206+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshottin
g/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":3269},"trace":
{"id":"e845bde5cdad8493d7df32c78976c408"},"transaction":{"id":"f81b3901da170c87"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-08-22T09:19:59.853+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","log
ger":"status"},"process":{"pid":3269},"trace":{"id":"cc494af7aa653f88e66e249af9ef7790"},"transaction":{"id":"7949dd48d39c007a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-08-22T09:19:59.855+00:00","message":"Task ML:saved-objects-sync-task: No ML saved objects in need of sy
nchronization","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":3269},"trace":{"id":"b4da4f82d7f37b5eaaee4997b7f91f74"},"transaction":{"
id":"b5c60425454c897f"}}
kibana.yml fle mentioned
>>>>>>> BACKUP END: Kibana interactive setup (2022-08-12T22:37:27.538Z)
This section was automatically generated during setup.
server.port: 5601
server.host: kibana.local
elasticsearch.hosts: ['https://192.168.252.133:9200']
elasticsearch.serviceAccountToken: AAEAAWVsYXN0aWMva2liYW5hL2Vucm9sbC1wcm9jZXNzLXRva2VuLTE2NjAzNDM4NDY3NDk6RFNnRHVkeWVSLUdTSURlUEEzM1hUUQ
xpack.encryptedSavedObjects.encryptionKey: fhjskloppd678ehkdfdlliverpoolfcr
logging.appenders.file.type: file
logging.appenders.file.fileName: /var/log/kibana/kibana.log
logging.appenders.file.layout.type: json
logging.root.appenders: [default, file]
pid.file: /run/kibana/kibana.pid
elasticsearch.ssl.certificateAuthorities: [/var/lib/kibana/ca_1660343847533.crt]
xpack.fleet.outputs: [{id: fleet-default-output, name: default, is_default: true, is_default_monitoring: true, type: elasticsearch, hosts: ['https://
192.168.252.133:9200'], ca_trusted_fingerprint: e31f472dfcc10ec46fccdbdef22466e46ddadec75a946f39a132298cf196dca4}]
Elasticsearch cluster status is show green.
elasticsearch:~$ curl -u "elastic:Ov4XU5D2vMJt7zrlhnQr" -k -XGET "https://elasticsearch.local:9200/_cluster/health?pretty"
{
"cluster_name" : "elasticsearch",
"status" : "green",
"timed_out" : false,
"number_of_nodes" : 1,
"number_of_data_nodes" : 1,
"active_primary_shards" : 11,
"active_shards" : 11,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 0,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 100.0
}
File beat is also sending data to elasticseaech but I am not able see data in kibana.
le.line":131},"message":"End of file reached: /var/log/nginx/error.log; Backoff now.","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::14433-64768","path":"/var/log/nginx/error.log","state-id":"native::14433-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:12.410Z","log.logger":"input.harvester","log.origin":{"file.name":"log/log.go","file.line":111},"message":"End of file reached: /var/log/nginx/access.log; Backoff now.","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":true,"old_os_id":"13891-64768","harvester_id":"553d54b1-1ff7-49c7-a01e-cc2f5f1d1ea6","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:13.472Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/filestream.go","file.line":131},"message":"End of file reached: /var/log/nginx/access.log; Backoff now.","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::13891-64768","path":"/var/log/nginx/access.log","state-id":"native::13891-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.214Z","log.logger":"file_watcher","log.origin":{"file.name":"filestream/fswatch.go","file.line":139},"message":"Start next scan","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.214Z","log.logger":"file_watcher","log.origin":{"file.name":"filestream/fswatch.go","file.line":209},"message":"Found 2 paths","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.406Z","log.logger":"input","log.origin":{"file.name":"input/input.go","file.line":137},"message":"Run input","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.406Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":223},"message":"Start next scan","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.406Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":473},"message":"Check file for harvesting: /var/log/nginx/access.log","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.406Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":571},"message":"Update existing file for harvesting: /var/log/nginx/access.log, offset: 2105","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":false,"old_os_id":"13891-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.406Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":624},"message":"Harvester for file is still running: /var/log/nginx/access.log","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":false,"old_os_id":"13891-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.406Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":473},"message":"Check file for harvesting: /var/log/nginx/access.log.1","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.407Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":571},"message":"Update existing file for harvesting: /var/log/nginx/access.log.1, offset: 1633","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log.1","state_id":"native::14460-64768","finished":false,"os_id":"14460-64768","old_source":"/var/log/nginx/access.log.1","old_finished":true,"old_os_id":"14460-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.407Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":626},"message":"File didn't change: /var/log/nginx/access.log.1","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log.1","state_id":"native::14460-64768","finished":false,"os_id":"14460-64768","old_source":"/var/log/nginx/access.log.1","old_finished":true,"old_os_id":"14460-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:15.407Z","log.logger":"input","log.origin":{"file.name":"log/input.go","file.line":287},"message":"input states cleaned up. Before: 2, After: 2, Pending: 0","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","ecs.version":"1.6.0"}
^C{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"service","log.origin":{"file.name":"service/service.go","file.line":54},"message":"Received sigterm/sigint, stopping","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.origin":{"file.name":"beater/filebeat.go","file.line":425},"message":"Stopping filebeat","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.origin":{"file.name":"beater/crawler.go","file.line":155},"message":"Stopping Crawler","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.origin":{"file.name":"beater/crawler.go","file.line":165},"message":"Stopping 1 inputs","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"crawler","log.origin":{"file.name":"beater/crawler.go","file.line":170},"message":"Stopping input: 16843071965146274422","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.origin":{"file.name":"cfgfile/reload.go","file.line":227},"message":"Dynamic config reloader stopped","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"reload","log.origin":{"file.name":"cfgfile/list.go","file.line":139},"message":"Stopping 1 runners ...","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"reload","log.origin":{"file.name":"cfgfile/list.go","file.line":150},"message":"Stopping runner: nginx (access)","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.origin":{"file.name":"input/input.go","file.line":134},"message":"input ticker stopped","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/input.go","file.line":321},"message":"Reader was closed. Closing.","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::14433-64768","path":"/var/log/nginx/error.log","state-id":"native::14433-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":154},"message":"client: closing acker","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":159},"message":"client: done closing acker","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":161},"message":"client: unlink from queue","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":183},"message":"client: cancelled 0 events","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":163},"message":"client: done unlink","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":166},"message":"client: closing processors","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":171},"message":"client: done closing processors","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"input-logfile/harvester.go","file.line":219},"message":"Stopped harvester for file","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::14433-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/input.go","file.line":145},"message":"Closing reader of filestream","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::14433-64768","path":"/var/log/nginx/error.log","state-id":"native::14433-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/input.go","file.line":145},"message":"Closing reader of filestream","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::13891-64768","path":"/var/log/nginx/access.log","state-id":"native::13891-64768","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/input.go","file.line":321},"message":"Reader was closed. Closing.","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::13891-64768","path":"/var/log/nginx/access.log","state-id":"native::13891-64768","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":154},"message":"client: closing acker","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.harvester","log.origin":{"file.name":"log/harvester.go","file.line":337},"message":"Reader was closed. Closing.","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":true,"old_os_id":"13891-64768","harvester_id":"553d54b1-1ff7-49c7-a01e-cc2f5f1d1ea6","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":159},"message":"client: done closing acker","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.harvester","log.origin":{"file.name":"log/harvester.go","file.line":618},"message":"Stopping harvester.","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":true,"old_os_id":"13891-64768","harvester_id":"553d54b1-1ff7-49c7-a01e-cc2f5f1d1ea6","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":161},"message":"client: unlink from queue","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.harvester","log.origin":{"file.name":"log/harvester.go","file.line":628},"message":"Closing file","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":true,"old_os_id":"13891-64768","harvester_id":"553d54b1-1ff7-49c7-a01e-cc2f5f1d1ea6","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":183},"message":"client: cancelled 0 events","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.harvester","log.origin":{"file.name":"log/harvester.go","file.line":492},"message":"Update state (offset: 2105).","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":true,"old_os_id":"13891-64768","harvester_id":"553d54b1-1ff7-49c7-a01e-cc2f5f1d1ea6","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.harvester","log.origin":{"file.name":"log/harvester.go","file.line":639},"message":"harvester cleanup finished.","service.name":"filebeat","input_id":"656ce01f-83b5-40cf-b323-bf8dba33bd7a","source_file":"/var/log/nginx/access.log","state_id":"native::13891-64768","finished":false,"os_id":"13891-64768","old_source":"/var/log/nginx/access.log","old_finished":true,"old_os_id":"13891-64768","harvester_id":"553d54b1-1ff7-49c7-a01e-cc2f5f1d1ea6","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":163},"message":"client: done unlink","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":166},"message":"client: closing processors","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":154},"message":"client: closing acker","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":159},"message":"client: done closing acker","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":161},"message":"client: unlink from queue","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":183},"message":"client: cancelled 0 events","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":163},"message":"client: done unlink","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":166},"message":"client: closing processors","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":171},"message":"client: done closing processors","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"reload","log.origin":{"file.name":"cfgfile/list.go","file.line":152},"message":"Stopped runner: nginx (access)","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"publisher","log.origin":{"file.name":"pipeline/client.go","file.line":171},"message":"client: done closing processors","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"input-logfile/harvester.go","file.line":219},"message":"Stopped harvester for file","service.name":"filebeat","id":"nginx","source_file":"filestream::nginx::native::13891-64768","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/prospector.go","file.line":294},"message":"Error while stopping harverster group: task failures\n\terror while adding new reader to the bookkeeper harvester is already running for file\n\terror while adding new reader to the bookkeeper harvester is already running for file\n\terror while adding new reader to the bookkeeper harvester is already running for file","service.name":"filebeat","id":"nginx","prospector":"file_prospector","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"filestream/prospector.go","file.line":163},"message":"Prospector has stopped","service.name":"filebeat","id":"nginx","prospector":"file_prospector","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"compat/compat.go","file.line":126},"message":"Input 'filestream' stopped (goroutine)","service.name":"filebeat","id":"nginx","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"input.filestream","log.origin":{"file.name":"compat/compat.go","file.line":134},"message":"Input 'filestream' stopped (runner)","service.name":"filebeat","id":"nginx","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.origin":{"file.name":"beater/crawler.go","file.line":185},"message":"Crawler stopped","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"registrar","log.origin":{"file.name":"registrar/registrar.go","file.line":132},"message":"Stopping Registrar","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.144Z","log.logger":"registrar","log.origin":{"file.name":"registrar/registrar.go","file.line":166},"message":"Ending Registrar","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2022-08-22T10:58:16.145Z","log.logger":"registrar","log.origin":{"file.name":"registrar/registrar.go","file.line":167},"message":"Stopping Registrar","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.145Z","log.logger":"registrar","log.origin":{"file.name":"registrar/registrar.go","file.line":137},"message":"Registrar stopped","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.147Z","log.logger":"monitoring","log.origin":{"file.name":"log/log.go","file.line":193},"message":"Total metrics","service.name":"filebeat","monitoring":{"metrics":{"beat":{"cgroup":{"cpu":{"id":"session-12.scope","stats":{"periods":0,"throttled":{"ns":0,"periods":0}}},"memory":{"id":"session-12.scope","mem":{"usage":{"bytes":46899200}}}},"cpu":{"system":{"ticks":530,"time":{"ms":530}},"total":{"ticks":840,"time":{"ms":840},"value":0},"user":{"ticks":310,"time":{"ms":310}}},"handles":{"limit":{"hard":1048576,"soft":1024},"open":9},"info":{"ephemeral_id":"8b42da0a-5b41-4496-ba29-fec92e87ad62","name":"filebeat","uptime":{"ms":1400994},"version":"8.3.3"},"memstats":{"gc_next":19732152,"memory_alloc":10751880,"memory_sys":29443080,"memory_total":76695112,"rss":96624640},"runtime":{"goroutines":16}},"filebeat":{"events":{"active":36,"added":38,"done":2},"harvester":{"closed":3,"open_files":0,"running":0,"skipped":0,"started":3},"input":{"log":{"files":{"renamed":0,"truncated":0}},"netflow":{"flows":0,"packets":{"dropped":0,"received":0}}}},"libbeat":{"config":{"module":{"running":1,"starts":1,"stops":0},"reloads":1,"scans":1},"output":{"events":{"acked":0,"active":0,"batches":0,"dropped":0,"duplicates":0,"failed":0,"toomany":0,"total":0},"read":{"bytes":0,"errors":0},"type":"elasticsearch","write":{"bytes":0,"errors":0}},"pipeline":{"clients":0,"events":{"active":31,"dropped":0,"failed":0,"filtered":7,"published":31,"retry":805,"total":38},"queue":{"acked":0,"max_events":4096}}},"registrar":{"states":{"cleanup":0,"current":2,"update":2},"writes":{"fail":0,"success":1,"total":1}},"system":{"cpu":{"cores":4},"load":{"1":0.1,"15":0.14,"5":0.14,"norm":{"1":0.025,"15":0.035,"5":0.035}}}},"ecs.version":"1.6.0"}}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.147Z","log.logger":"monitoring","log.origin":{"file.name":"log/log.go","file.line":194},"message":"Uptime: 23m20.997030472s","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.147Z","log.logger":"monitoring","log.origin":{"file.name":"log/log.go","file.line":161},"message":"Stopping metrics logging.","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-08-22T10:58:16.147Z","log.origin":{"file.name":"instance/beat.go","file.line":475},"message":"filebeat stopped.","service.name":"filebeat","ecs.version":"1.6.0"}