zoukankan      html  css  js  c++  java
  • ELK之elasticsearch插件导致filebeat没有上传日志至elasticsearch解决办法

      使用filebeat收集nginx发现日志为上传,elasticsearch没有日志,kibana没有展示

      查看filebeat日志

      日志目录为/var/log/filebeat  下面有多个日志文件,如果在日志文件filebeat没有发现报错信息可以查看 filebeat.1 2 3 4 5 6 7等,发现日志报错如下

    2019-06-06T10:43:23.771+0800    ERROR   fileset/factory.go:142  Error loading pipeline: Error loading pipeline for fileset nginx/access: This module requires the following Elasticsearch plugins: ingest-user-agent, ingest-geoip. You can install them by running the following commands on all the Elasticsearch nodes:
        sudo bin/elasticsearch-plugin install ingest-user-agent
        sudo bin/elasticsearch-plugin install ingest-geoip
    

      查看elasticsearch主机插件是否安装

    [root@prd-elk-logstash-02 ~]# /usr/share/elasticsearch/bin/elasticsearch-plugin list
    ingest-geoip
    ingest-user-agent
    

      插件已经正常安装 ,卸载了重新安装一次即可(无需重启elasticsearch)

    #卸载
    /usr/share/elasticsearch/bin/elasticsearch-plugin remove ingest-geoip
    /usr/share/elasticsearch/bin/elasticsearch-plugin remove ingest-user-agent
    #安装
    /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-geoip
    /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-user-agent
    

      

  • 相关阅读:
    滑动窗口法学习
    209. Minimum Size Subarray Sum
    485. Max Consecutive Ones
    27. Remove Element
    167. Two Sum II
    561. Array Partition I
    344. Reverse String
    14. 最长公共前缀
    layui上传文件时出现 请求上传接口出错
    Linux-5.13将初步支持苹果M1 Soc
  • 原文地址:https://www.cnblogs.com/minseo/p/10983968.html
Copyright © 2011-2022 走看看