Question

我在CentOS7 VM上安装了ELK堆栈版本7.0.0，并且在Logstash服务启动期间遇到问题：

[错误] 2019-05-13 08：21：37.359 [Converge PipelineAction :: Create]代理-无法执行操作{：action => LogStash :: PipelineAction :: Create / pipeline_id：main，：exception => “ MultiJson :: ParseError”，：message =>“ JrJackson :: ParseError”，：backtrace => [“ / usr / share / logstash / vendor / bundle / jruby / 2.5.0 / gems / multi_json-1.13.1 / lib /multi_json/adapter.rb:20:in load'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/multi_json-1.13.1/lib/multi_json.rb:122:in load'“，” /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/avro-1.8.2/lib/avro/schema .rb：36：在parse'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-avro-3.2.3-java/lib/logstash/codecs/avro.rb:69:in中注册“”，“ /usr/share/logstash/logstash-core/lib/logstash/codecs/base.rb:18：在initialize'", "org/logstash/plugins/PluginFactoryExt.java:255:in插件中”，“ org / logstash / execution / JavaBasePipelineExt.java：50：in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:in initialize'“，” /usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in {{1 }}在converge_state中阻止'“]}

请帮助找出解决此问题的方法。在另一台Centos VM上进行的类似安装也可以正常工作。

Answer 1

我认为您是无法在logstash.yml文件中解析的配置json格式

进行简单的配置，如打击

input {     
  beats {
    port => 5044
 }
}
output {
 stdout { codec => rubydebug }  

 elasticsearch {
  hosts => ["http://ip:9200"]
 }
}

无法执行动作：action => LogStash :: PipelineAction :: Create / pipeline_id：main

1 个答案: