Question

我正在尝试在服务器上设置filebeat，然后在Elastic Stack Docker容器设置上运行该设置。但是目前，无论我尝试什么，都没有使其工作的选择。使用或不使用https，都会出现以下错误：

2019-03-05T14:58:20.458+0100    ERROR   instance/beat.go:911    Exiting: Failed to import index-pattern: Failed to load directory /usr/share/filebeat/kibana/6/index-pattern:
          error loading /usr/share/filebeat/kibana/6/index-pattern/filebeat.json: fail to execute the HTTP POST request: Post http://10.248.115.125:5601/api/kibana/dashboards/import?force=true: net/http: request canceled (Client.Timeout exceeded while awaiting headers). Response:
        Exiting: Failed to import index-pattern: Failed to load directory /usr/share/filebeat/kibana/6/index-pattern:
          error loading /usr/share/filebeat/kibana/6/index-pattern/filebeat.json: fail to execute the HTTP POST request: Post http://10.248.115.125:5601/api/kibana/dashboards/import?force=true: net/http: request canceled (Client.Timeout exceeded while awaiting headers). Response:

firebeat.yml配置为：

# List of inputs to fetch data.
filebeat.inputs:
- type: log

  paths:
    - "/var/log/nova/*.log"
  document_type: nova

  paths:
    - "/var/log/neutron/*.log"
  document_type: neutron

  paths:
    - "/var/log/messages"
  document_type: syslog

  paths:
    - "/var/log/openvswitch/*.log"
  document_type: openvswitch

  paths:
    - "/var/log/ceilometer/*.log"
  document_type: ceilometer

  paths:
    - "/var/log/libvirt/*.log"
  document_type: libvirt

  # Change to true to enable this input configuration.
  enabled: true

output.elasticsearch:
  hosts: '10.000.000.000:9200'

  # Optional SSL settings
  #ssl.enabled: true
  #ssl.verification_mode: "none"

  protocol: "http"
  #username: "elastic"
  #password: "Nd6nFv8ktCbZMqKgiLsFgQ=="

  #template.name: "filebeat"
  #template.path: "filebeat.template.json"

setup.kibana:
  host: "http://10.000.000.000:5601"
  #username: "elastic"
  #password: "Nd6nFv8ktCbZMqKgiLsFgQ=="
  protocol: "http"
  ssl.enabled: false

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

filebeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 10s

Kibana在Docker容器中的其他主机上与Elasticsearch和logstash一起运行。

Answer 1

我想当您按照documentation中所述更改kibana.host时，您将能够创建仪表板：

setup.kibana:
  host: "10.0.0.0:5601"
  protocol: "http"
  ssl.enabled: false

Answer 2

这是用户授权问题。 Filebeat 在将数据加载到 ES 之前，加载 Kibana 仪表板并失败。将您的安全性切换到 aws 或 FB 中的 IP 白名单到 Logstash，然后切换到 ES 即可。 Reference

将Filebeat连接到Kibana

2 个答案: