问题遇到的现象和发生背景
用docker布置filebeat,启动后显示filebeat启动成功,但是一直显示日志信息未发生变化,显示和es链接成功,es也没有监控信息,redis中也没有信息,端口是开放的
问题相关代码,请勿粘贴截图
docker 容器信息
"/usr/bin/tini -- /u…" 5 days ago Up 18 minutes filebeat
"/bin/tini -- /usr/l…" 6 days ago Up 6 days 0.0.0.0:9200->9200/tcp, 0.0.0.0:9300->9300/tcp es
"docker-entrypoint.s…" 7 days ago Up 7 days 0.0.0.0:6379->6379/tcp redis
yml文件
xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch:
hosts: ["http://ip:9200"]
username: beats_system
password: DMC@123456
filebeat:
inputs:
- type: log
enable: true
encoding: UTF-8
paths:- /ywb/logs/*.log
multiline.pattern: '^\d{4}'
multiline.negate: true
multiline.match: after
tags: ["java-logs"]
registry_file: /ywb/filebeat/registry
output:
redis:
hosts: ["ip:6379"]
key: elk_log
db: 15
password: DMC@123456运行结果及报错内容
pipeline/retry.go:219 retryer: send unwait signal to consumer
pipeline/retry.go:223 done
eslegclient/connection.go:273 Attempting to connect to Elasticsearch version 7.15.2
pipeline/output.go:151 Connection to backoff(monitoring(http:/ip:9200)) established我的解答思路和尝试过的方法
- /ywb/logs/*.log