0

我已经使用本手册在我的 ubuntu 服务器上安装了 ELK ，

现在我想从 Windows 服务器索引一些日志文件，所以我安装了一个 logstash 转发器（LumberJack），但我无法让它运行。这是 logstash-forwarder.conf 文件：

{
    "network": {
    "servers": [ "http://XX.XX.XX.XX:5000" ],
    "ssl key": "D:/lumberjack/pki/tls/certs/logstash-forwarder.crt",
    "ssl ca": "D:/lumberjack/pki/tls/certs/logstash-forwarder.crt",
    "timeout": 15,
  },
  "files": [
    {
      "paths": [
         #single paths are fine
         "D:/bea12/Oracle/Middleware/domains/Google/servers/RT1/logs/AppLogs/RT1_APP_9_0.log",
         #globs are fine too, they will be periodically evaluated
         #to see if any new files match the wildcard.
        "/var/logauth.log"
      ],
  ]
    }
}

这是我在尝试运行“lumberjack.exe”时遇到的错误，这是我用 go-build 创建的：

2015/04/30 18:17:39.052033 Failed unmarshalling json: invalid character '}' looking for beginning of object key string
2015/04/30 18:17:39.052033 Could not load config file d:\lumberjack\logstash-forwarder.conf: invalid character '}' looking for beginning of object key string

谁能告诉我我做错了什么？顺便说一句，这是我用来运行转发器的命令：

lumberjack.exe -config="d:\lumberjack\logstash-forwarder.conf"
4

1 回答 1

0

好的。所以问题出在配置文件中，开头有 2 个不必要的逗号，并且不需要http:\ ：

{
    "network": {
    "servers": [ "XX.XX.XX.XX:5000" ],
    "ssl key": "D:/lumberjack/pki/tls/certs/logstash-forwarder.key",
    "ssl ca": "D:/lumberjack/pki/tls/certs/logstash-forwarder.crt",
    "timeout": 15
  },
  "files": [
    {
      "paths": [
         #single paths are fine
         "D:/bea12/Oracle/Middleware/domains/google/servers/RT1/logs/AppLogs/RT1_APP_9_0.log",
         #globs are fine too, they will be periodically evaluated
         #to see if any new files match the wildcard.
        "/var/logauth.log"
      ]
      }
  ]

}

这是我在 Windows 上为LumberJack建议的配置文件。

于 2015-05-03T13:06:06.017 回答