Question

我有以下配置

input {
  beats {
    'port' => '5044'
  }
}
output {
  cloudwatch {
    'region'=> 'us-west-2'
  }
}

我在/usr/share/logstash/pipeline/

中只有一个配置文件

bash-4.2$ ls /usr/share/logstash/pipeline
logstash.conf

ps -ef只有一个Java进程。在容器中运行

bash-4.2$ ps -ef
UID        PID  PPID  C STIME TTY          TIME CMD
logstash     1     0  0 17:33 ?        00:00:00 bash -c echo -e $CONFIG > /usr/share/logstash/pipeline/logstash.conf && /usr/local/bin/docker-entrypoint
logstash     5     1  6 17:33 ?        00:01:00 /bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+DisableExplicitGC -Djava.awt.headl
logstash    62     0  0 17:38 ?        00:00:00 bash
logstash    77    62  0 17:47 ?        00:00:00 ps -ef

然而，logstash失败并提供

[2017-12-06T07:36:46,505][ERROR][logstash.pipeline ] A plugin had an unrecoverable error. Will restart this plugin.
Plugin: <LogStash::Inputs::Beats port=>9600, id=>"a585f91b9cdadf6400c91b02e2bd3177cf93afd8-1...
Error: event executor terminated

Answer 1

请尝试在logstash文件中定义不同的端口号（输入部分），并将相同的端口号也放置在filebeat.yml中。
例如使用5085代替5044

Logstash错误：地址已在使用中

1 个答案: