INFO There are no nonzero metrics in the last 30th message in filebeat

I am new to ELK and am having problems running logstash. I started logatash as indicated in the link below. https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html

But when starting filebeat and logstash, its show logstash starts successfully on port 9600. In filebeat it gives like this

INFO No non-zero values ​​in the last 30 seconds

Logstash does not receive input from filebeat. Please, help..

filebeat.yml

 filebeat.prospectors:
 - input_type: log
 paths:
 - /path/to/file/logstash-tutorial.log 
 output.logstash:
 hosts: ["localhost:5043"]

and I ran this command sudo./filebeat -e -c filebeat.yml -d "publish"

Configuration file

input {
    beats {
         port => "5043"
     }
  }

output {
     stdout { codec => rubydebug }
}

then executed the commands

 1)bin/logstash -f first-pipeline.conf --config.test_and_exit - this        gave warnings
2)bin/logstash -f first-pipeline.conf --config.reload.automatic -This started the logstash on port 9600

I could not continue after this, since filebeat gives INFO

INFO No non-zero values ​​in the last 30 seconds

And the used version of ELK is 5.1.2

+4
2

, Filebeat , .

, . .

cd /var/lib/filebeat
sudo mv registry registry.bak
sudo service filebeat restart

, .

+3

Filebeat , (, ).

, tail_files.

, .

-1

Source: https://habr.com/ru/post/1668349/


All Articles