Systemd[1]: Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch

Elastic Stack Beats
,
1

Please some one have an idea how to start filebeats to read data from log and send it to elasticsearch.

I have this issues:

systemd[1]: Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch..

Process: 26715 ExecStart=/usr/share/filebeat/bin/filebeat $BEAT_LOG_OPTS $BEAT_CONFIG_OPTS $BEAT_PATH_OPTS (code=exited, status=1/FAILURE)

sudo systemctl status filebeat
● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch.
Loaded: loaded (/usr/lib/systemd/system/filebeat.service; disabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Thu 2021-04-08 19:46:45 CEST; 12min ago
Docs: https://www.elastic.co/products/beats/filebeat
Process: 26715 ExecStart=/usr/share/filebeat/bin/filebeat $BEAT_LOG_OPTS $BEAT_CONFIG_OPTS $BEAT_PATH_OPTS (code=exited, status=1/FAILURE)
Main PID: 26715 (code=exited, status=1/FAILURE)

Thank hyou for your help

2

This means that you either have not configured an input + output in /etc/filebeat/filebeat.yml, or that it is malformed, it is complaining that it cannot find anything to do, or that it does not find an output.

If you have configured it already could you copy your filebeat.yml here, so maybe we can see where the error is?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.