Filebeat不向elasticsearch发送数据

emeijp43 于 2023-08-03 发布在 ElasticSearch

关注(0)|答案(1)|浏览(106)

我已经在我的kubernetes集群中安装了elasticsearch 8.5和Kibana 8.5，只是简单地在弹性回购中应用了官方的helm文件。现在我尝试使用以下配置安装filebeat：

filebeat.inputs:
    - type: container
      paths:
      - "/var/log/app.log"
      processors:
        - add_kubernetes_metadata:
            host: ${NODE_NAME}
            in_cluster: true

字符串
和/或

output.elasticsearch:
      hosts: ['${ELASTICSEARCH_HOST:elasticsearch}:${ELASTICSEARCH_PORT:9200}']
      username: ${ELASTICSEARCH_USERNAME}
      password: ${ELASTICSEARCH_PASSWORD}
      protocol: https
      ssl.certificate_authorities: ["/usr/share/filebeat/certs/ca.crt"]

型
我们的应用程序正在/var/log/app. log下的pod容器中写入日志，但似乎filebeat没有读取日志或将其发送到elasticsearch，因为在elastic中没有创建索引。
我该如何解决问题？我做错了什么？
谢啦，谢啦

elasticsearch

来源：https://stackoverflow.com/questions/76663981/filebeat-not-sending-data-to-elasticsearch

1条答案

按热度按时间

gupuwyp21#

这是一个工作配置（路径等）。需要调整）

daemonset:
  extraEnvs:
    - name: "ELASTICSEARCH_USERNAME"
      valueFrom:
        secretKeyRef:
          name: elasticsearch-master-credentials
          key: username
    - name: "ELASTICSEARCH_PASSWORD"
      valueFrom:
        secretKeyRef:
          name: elasticsearch-master-credentials
          key: password

filebeatConfig:
  filebeat.yml: |
    logging.metrics.enabled: false
    filebeat.inputs:
      - type: container
        paths:
          - /var/log/containers/agri-check*.log
        json:
          keys_under_root: true
          overwrite_keys: true
        processors:
          - add_kubernetes_metadata:
              host: ${NODE_NAME}
              matchers:
                - logs_path:
                    logs_path: "/var/log/containers/"
      - type: container
        paths:
          - /var/log/containers/*.log
        exclude_files: ['.*/agri-check.*$']
        processors:
          - add_kubernetes_metadata:
              host: ${NODE_NAME}
              matchers:
                - logs_path:
                    logs_path: "/var/log/containers/"

    output.elasticsearch:
      host: '${NODE_NAME}'
      hosts: "https://elasticsearch-master:9200"
      username: '${ELASTICSEARCH_USERNAME}'
      password: '${ELASTICSEARCH_PASSWORD}'
      protocol: https
      ssl.verification_mode: none

字符串

赞(0）回复(0）举报 2023-08-03

我来回答

Filebeat不向elasticsearch发送数据

1条答案

相关问题

热门标签

最新问答