信息Filebeat的最近30秒消息中没有非零度量

问题描述

我是ELK的新手，运行logstash时遇到问题.我运行了以下链接中定义的logatash https://www.elastic.co/guide/zh-cn/logstash /current/advanced-pipeline.html

I'm new to ELK and I'm getting issues while running logstash. I ran the logatash as defined in below linkhttps://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html

但是当运行filebeat和logstash时，它的show logstash成功地在端口9600上运行.在filebeat中，它给出了这样的

But when run filebeat and logstash, Its show logstash successfully runs at port 9600. In filebeat it gives like this

INFO最近30秒钟内没有非零指标

INFO No non-zero metrics in the last 30s

Logstash无法从filebeat中获取输入.请帮助..

Logstash is not getting input from filebeat.Please help..

filebeat .yml是

the filebeat .yml is

 filebeat.prospectors:
 - input_type: log
 paths:
 - /path/to/file/logstash-tutorial.log 
 output.logstash:
 hosts: ["localhost:5043"]

我运行了这个命令sudo ./filebeat -e -c filebeat.yml -d发布"

and I ran this commandsudo ./filebeat -e -c filebeat.yml -d "publish"

配置文件为

input {
    beats {
         port => "5043"
     }
  }

output {
     stdout { codec => rubydebug }
}

然后运行命令

 1)bin/logstash -f first-pipeline.conf --config.test_and_exit - this        gave warnings
2)bin/logstash -f first-pipeline.conf --config.reload.automatic -This started the logstash on port 9600

此后我无法继续，因为filebeat给出了信息

I couldn't proceeds after this since filebeat gives the INFO

INFO最近30秒钟内没有非零指标

INFO No non-zero metrics in the last 30s

使用的ELK版本是5.1.2

And the ELK version used is 5.1.2

推荐答案

因此，您可以尝试更新或删除注册表文件. 请参见此处

So you can try updating or deleting registry file. see here

cd /var/lib/filebeat
sudo mv registry registry.bak
sudo service filebeat restart

我也遇到了这个问题，并且已经通过上述命令解决了.

I have also faced this issue and I have solved with above commands.

这篇关于信息Filebeat的最近30秒消息中没有非零度量的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！