为什么Filebeat无法连接到Logstash

时间:2020-02-19 20:00:16

标签: elasticsearch logstash filebeat elk

我正在尝试将log4net日志发送到logstash进行解析,然后最终进入elasticsearch。我已将端口添加到Windows防火墙安全设置中,并允许所有连接到5044和9600。

在文件拍日志中,出现此错误

 list.nativeElement.addEventListener('keydown', this.onKeyDown);

Filebeat.yml(Logstash部分)

pipeline/output.go:100  Failed to connect to backoff(async(tcp://[http://hostname:5044]:5044)): lookup http://hostname:5044: no such host

Logstash.yml

我已将http.host设置为0.0.0.0

#----------------------------- Logstash output --------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["http://hostname:5044"]

  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]

  # Certificate for SSL client authentication
  #ssl.certificate: "/etc/pki/client/cert.pem"

  # Client Certificate Key
  #ssl.key: "/etc/pki/client/cert.key"

#================================ Processors =====================================

Logstash过滤器配置

# ------------ Metrics Settings --------------
#
# Bind address for the metrics REST endpoint
#
 http.host: "0.0.0.0"
#
# Bind port for the metrics REST endpoint, this option also accept a range
# (9600-9700) and logstash will pick up the first available ports.
#
# http.port: 9600-9700

3 个答案:

答案 0 :(得分:1)

您可以尝试使用主机名:

hosts: ["hostname:5044"]

答案 1 :(得分:0)

如@Adrian Dr所述,请尝试使用:

send

而且还可以将logstash绑定到单个端口:

hosts: ["hostname:5044"]

答案 2 :(得分:0)

相同错误。这是因为您提到了协议。

您必须从主机字段中删除“ http”。

hosts: ["somename.com:5044"] 

或ip

hosts: ["10.10.10.1:5044"]