如何与logstash一起设置节拍

时间:2019-01-03 10:49:59

标签: elasticsearch stack logstash kibana elastic-beats

我正在尝试使用docker compose配置使用logstash的Beats。如果我不使用logstash,那么一切都可以在kibana的仪表板中完美运行,但是当我使用logstash并打开kibana时,会出现一些错误,并且某些可视化无法显示。这是我的一些配置:

logstash.conf

input {
    beats {
        port => 5044
    }
}

output {
    elasticsearch {
        hosts => "elasticsearch:9200"
        index => "%{[@metadata][beat]}-%{[@metadata][version]}"
    }
}

metricbeat.yml

#----------------------------- Logstash output --------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["192.168.1.1:5044"]

我在kibana中遇到的一些错误是:

Saved "field" parameter is now invalid. Please select a new field.

The request for this panel failed.
Fielddata is disabled on text fields by default. Set fielddata=true on [beat.name] in order
to load fielddata in memory by uninverting the inverted index.
Note that this can however use significant memory. Alternatively use a keyword field instead.

0 个答案:

没有答案