我正在尝试使用docker compose配置使用logstash的Beats。如果我不使用logstash,那么一切都可以在kibana的仪表板中完美运行,但是当我使用logstash并打开kibana时,会出现一些错误,并且某些可视化无法显示。这是我的一些配置:
logstash.conf
input {
beats {
port => 5044
}
}
output {
elasticsearch {
hosts => "elasticsearch:9200"
index => "%{[@metadata][beat]}-%{[@metadata][version]}"
}
}
metricbeat.yml
#----------------------------- Logstash output --------------------------------
output.logstash:
# The Logstash hosts
hosts: ["192.168.1.1:5044"]
我在kibana中遇到的一些错误是:
Saved "field" parameter is now invalid. Please select a new field.
The request for this panel failed.
Fielddata is disabled on text fields by default. Set fielddata=true on [beat.name] in order
to load fielddata in memory by uninverting the inverted index.
Note that this can however use significant memory. Alternatively use a keyword field instead.