我今天开始使用以下配置和filbeat读取日志开始文件拍,直到两天前,现在它停止接收日志。我也尝试通过删除注册表文件夹来重新启动filebeat,但是结果是相同的。
它只是重复说文件收集仍在运行
filebeat.yml
filebeat.inputs:
- type: log
paths:
- /your/path/goes/here/*.log
output.logstash:
enabled: true
hosts: ["localhost:5044"]
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
keepfiles: 7
permissions: 0644
Filebeat日志
|2020-07-12T19:52:57.765Z|DEBUG|[input]|log/input.go:421|Check file for harvesting: /opt/deployment/unityapp/unity/npm-debug.log|
|---|---|---|---|---|
|2020-07-12T19:52:57.765Z|DEBUG|[input]|log/input.go:511|Update existing file for harvesting: /opt/deployment/unityapp/unity/npm-debug.log, offset: 96972|
|2020-07-12T19:52:57.765Z|DEBUG|[input]|log/input.go:563|Harvester for file is still running: /opt/deployment/unityapp/unity/npm-debug.log|
|2020-07-12T19:52:57.765Z|DEBUG|[input]|log/input.go:212|input states cleaned up. Before: 2, After: 2, Pending: 0|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|input/input.go:141|Run input|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:191|Start next scan|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:421|Check file for harvesting: /opt/deployment/unityapp/unity/django_blend.log|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:511|Update existing file for harvesting: /opt/deployment/unityapp/unity/django_blend.log, offset: 222051|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:563|Harvester for file is still running: /opt/deployment/unityapp/unity/django_blend.log|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:421|Check file for harvesting: /opt/deployment/unityapp/unity/npm-debug.log|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:511|Update existing file for harvesting: /opt/deployment/unityapp/unity/npm-debug.log, offset: 96972|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:563|Harvester for file is still running: /opt/deployment/unityapp/unity/npm-debug.log|
|2020-07-12T19:53:07.765Z|DEBUG|[input]|log/input.go:212|input states cleaned up. Before: 2, After: 2, Pending: 0|
|2020-07-12T19:53:17.765Z|DEBUG|[input]|input/input.go:141|Run input|
|2020-07-12T19:53:17.765Z|DEBUG|[input]|log/input.go:191|Start next scan|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:421|Check file for harvesting: /opt/deployment/unityapp/unity/django_blend.log|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:511|Update existing file for harvesting: /opt/deployment/unityapp/unity/django_blend.log, offset: 222051|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:563|Harvester for file is still running: /opt/deployment/unityapp/unity/django_blend.log|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:421|Check file for harvesting: /opt/deployment/unityapp/unity/npm-debug.log|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:511|Update existing file for harvesting: /opt/deployment/unityapp/unity/npm-debug.log, offset: 96972|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:563|Harvester for file is still running: /opt/deployment/unityapp/unity/npm-debug.log|
|2020-07-12T19:53:17.766Z|DEBUG|[input]|log/input.go:212|input states cleaned up. Before: 2, After: 2, Pending: 0|
请建议如何对文件拍进行故障排除,以便继续从日志文件接收日志