CircuitBreaker ::抢救异常{:name =>"击败输入",:exception => LogStash :: Inputs :: Beats :: InsertingToQueueTakeTooLong,:level =>:warn}

时间:2016-05-18 07:02:28

标签: elasticsearch logstash kibana elastic-stack filebeat

我是ELK堆栈的新手。我正在尝试设置FileBeat - > Logstash - > ElasticSearch - > Kibana。在尝试将FileBeat输出发送到Logstash输入时,我在Logstash端遇到错误:

CircuitBreaker::rescuing exceptions {:name=>"Beats input", :exception=>LogStash::Inputs::Beats::InsertingToQueueTakeTooLong, :level=>:warn}
Beats input: The circuit breaker has detected a slowdown or stall in the pipeline, the input is closing the current connection and rejecting new connection until the pipeline recover. {:exception=>LogStash::Inputs::BeatsSupport::CircuitBreaker::HalfOpenBreaker, :level=>:warn}

我正在使用带有FileBeat的Logstash 2.3.2版本:1.2.2,elasticsearch:2.2.1 我的logstash配置:

input {
  beats {
    port => 5044
#    codec => multiline {
#      pattern => "^%{TIME}"
#      negate => true
#      what => previous
#    }
  }
}

filter {
  grok {
    match => { "message" => "^%{TIME:time}\s+%{LOGLEVEL:level}" }
  }
}

output {
  elasticsearch {
    hosts => ["host:9200"]
    manage_template => false
    index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
    document_type => "%{[@metadata][type]}"
  }
}

我的文件配置:

filebeat:  
    prospectors:    
        -      paths:        - *.log      
        input_type: log      
    tail_files: false
output:  
    logstash:    
        hosts: ["host:5044"]    
        compression_level: 3
shipper:
logging:  
    to_files: true  
    files:    
        path: /tmp    
        name: mybeat.log  
        level: error

0 个答案:

没有答案