1

我在我的 CentOS7 VM 上安装了 ELK 堆栈版本 7.0.0，但在 Logstash 服务启动期间遇到了一个问题：

[错误] 2019-05-13 08:21:37.359 [Converge PipelineAction::Create] 代理 - 无法执行操作 {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"MultiJson: :ParseError", :message=>"JrJackson::ParseError", :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/multi_json-1.13.1/lib/multi_json/ adapter.rb:20:in load'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/multi_json-1.13.1/lib/multi_json.rb:122:inload'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/avro-1.8.2/lib/avro/schema.rb:36:in parse'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-avro-3.2.3-java/lib/logstash/codecs/avro.rb:69:inregister' ", "/usr/share/logstash/logstash-core/lib/logstash/codecs/base.rb:18:in initialize'", "org/logstash/plugins/PluginFactoryExt.java:255:inplugin'", "org/logstash/execution/JavaBasePipelineExt.java:50:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:in初始化'", " /usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36：在execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:in块中收敛状态'"]}

请帮助找出解决此问题的方法。另一个 Centos VM 上的类似安装工作正常。

4

1 回答 1

3

我认为你是配置 json 格式而不是在 logstash.yml 文件中解析

把简单的配置像吹

input {     
  beats {
    port => 5044
 }
}
output {
 stdout { codec => rubydebug }  

 elasticsearch {
  hosts => ["http://ip:9200"]
 }
}
于 2019-05-17T05:51:04.270 回答