Logstash無法連接到彈性搜索

{:timestamp=>"2017-07-19T15:56:36.517000+0530", :message=>"Attempted to send a bulk request to Elasticsearch configured at '[\"http://localhost:9200\"]', but Elasticsearch appears to be unreachable or down!", :error_message=>"Connection refused (Connection refused)", :class=>"Manticore::SocketException", :level=>:error} 
{:timestamp=>"2017-07-19T15:56:37.761000+0530", :message=>"Connection refused (Connection refused)", :class=>"Manticore::SocketException", :backtrace=>["/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.0-java/lib/manticore/response.rb:37:in `initialize'", "org/jruby/RubyProc.java:281:in `call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.0-java/lib/manticore/response.rb:79:in `call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.0-java/lib/manticore/response.rb:256:in `call_once'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.6.0-java/lib/manticore/response.rb:153:in `code'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.18/lib/elasticsearch/transport/transport/http/manticore.rb:84:in `perform_request'", "org/jruby/RubyProc.java:281:in `call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.18/lib/elasticsearch/transport/transport/base.rb:257:in `perform_request'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.18/lib/elasticsearch/transport/transport/http/manticore.rb:67:in `perform_request'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.18/lib/elasticsearch/transport/transport/sniffer.rb:32:in `hosts'", "org/jruby/ext/timeout/Timeout.java:147:in `timeout'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.18/lib/elasticsearch/transport/transport/sniffer.rb:31:in `hosts'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.18/lib/elasticsearch/transport/transport/base.rb:79:in `reload_connections!'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.7.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:72:in `sniff!'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.7.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:60:in `start_sniffing!'", "org/jruby/ext/thread/Mutex.java:149:in `synchronize'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.7.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:60:in `start_sniffing!'", "org/jruby/RubyKernel.java:1479:in `loop'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-2.7.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:59:in `start_sniffing!'"], :level=>:error} 
{:timestamp=>"2017-07-19T15:56:38.520000+0530", :message=>"Attempted to send a bulk request to Elasticsearch configured at '[\"http://localhost:9200\"]', but Elasticsearch appears to be unreachable or down!", :error_message=>"Connection refused (Connection refused)", :class=>"Manticore::SocketException", :level=>:error}

雖然彈性搜索在端口127.0.0.1:9200 運行從那裏logstash正在此配置我還沒有配置logstash localhost上Logstash無法連接到彈性搜索

連接彈性搜索我不明白

在logstash.service

ExecStart=/usr/share/logstash/bin/logstash "--path.settings" "/etc/logstash"

和的/ etc/logstash 我logstash.yml

path.config: /etc/logstash/conf.d

在/etc/logstash/conf.d

output { 
    elasticsearch { hosts => ["10.2.0.10:9200"] 
    manage_template => false 
    index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}" 
    document_type => "%{[@metadata][type]}" 
    } 
}

來源

2017-07-19 Nitigya Sharma

你有在'/ etc/logstash/conf.d'另一個配置文件？你可以用'--debug'標誌啓動logstash並將輸出粘貼到你的問題中嗎？ – Val

conf.d是您的目錄正確的，你需要一個文件有什麼樣myconf.conf並且在以下格式：

input { 

} 

filter { 
#can be empty 
} 

output { 

}

一旦應用所有更改，您需要重新啓動logstash服務，並且它將應用您的新更改。你也可以在你的LS設置logstash.yml文件中控制它，如果你需要重新啓動它自己，一旦你對conf.d下的任何文件應用了一個新的改變。

你也可以分解你的conf文件1_input.conf 2_filter.conf和99_output.conf，這樣每個包含它自己的插件即輸入，過濾和輸出。

來源

2017-07-21 18:45:56 Zee

開始Elasticsearch。

爲Logstash編寫一個conf文件來連接並上傳數據到Elasticsearch。

input { 
    file { 
      type => "csv" 
      path => "path for csv." 
      start_position => "beginning" 
     } 
    } 
filter { 
    csv { 
     columns => ["Column1","Column2"] 
     separator => "," 
     } 
    mutate { 
     convert => {"Column1" => "float"} 
     } 
    } 
output { 
    elasticsearch { 
    hosts => "http://localhost:9200" 
     } 
    stdout { codec => rubydebug} 
}

elasticsearch的主機可以在elasticsearch.yml文件中配置。
運行conf文件（logstash.bat -f abc.conf）

來源

2017-07-22 04:53:41

Logstash無法連接到彈性搜索

回答

相關問題