Question

我尝试将日志从Filebeat传输到Logstash

两者都在同一网络中的不同EC2实例上运行。显然使用了socks5协议而不是http。

这是我的filebeat.yml配置文件

filebeat.prospectors:
- type: log
  paths:
    - /camel-logs/app.log
output.logstash:
  hosts: ["remote-host:5044"]
  proxy_url: socks5://10.0.0.10:5044
filebeat.inputs:
- type: log
  paths:
    - /camel-logs/app.log

老实说，我真的不知道我是否应该在这里使用探矿者，投入物或两者。目前都没有。

我肯定两个主机之间的TCP端口5044是开放且可访问的，但我不知道socks5甚至可能通过TCP吗？我对这些东西的了解非常有限。

我收到此错误：

pipeline/output.go:74   Failed to connect: dial tcp 10.0.0.10:5044: getsockopt: connection refused

这也可能很有趣：

log/log.go:124  Non-zero metrics in the last 30s        {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":20,"time":24},"total":{"ticks":40,"time":52,"value":40},"user":{"ticks":20,"time":28}},"info":{"ephemeral_id":"192acef7-0adb-4fbb-adfe-90cade7a5498","uptime":{"ms":30011}},"memstats":{"gc_next":4194304,"memory_alloc":2166616,"memory_total":4100568,"rss":21409792}},"filebeat":{"events":{"active":334,"added":335,"done":1},"harvester":{"open_files":1,"running":1,"started":1}},"libbeat":{"config":{"module":{"running":0}},"output":{"type":"logstash"},"pipeline":{"clients":1,"events":{"active":318,"filtered":17,"published":318,"retry":852,"total":335}}},"registrar":{"states":{"current":1,"update":1},"writes":2},"system":{"cpu":{"cores":2},"load":{"1":3.22,"15":0.47,"5":1.23,"norm":{"1":1.61,"15":0.235,"5":0.615}}}}}}

getsockopt：连接被拒绝：将日志从Filebeat传输到其他主机上的Logstash

0 个答案: