Logstash cheat sheet: Difference between revisions

Line 128: Line 128:
::offset field の mapping が long になってる。logstash 側で対処してみた。
::offset field の mapping が long になってる。logstash 側で対処してみた。
:1.0.0-rc2 ではドキュメントの整備、ログ情報の充実、shipper filed の再編等々。
:1.0.0-rc2 ではドキュメントの整備、ログ情報の充実、shipper filed の再編等々。
<syntaxhighlight lang="text" enclose="div">
/usr/bin/filebeat[9999]: transport.go:129: SSL client failed to connect with: x509: certificate signed by unknown authority
</syntaxhighlight>
<syntaxhighlight lang="text" enclose="div">
log.go:126: File reading error. Stopping harvester. Error: EOF
</syntaxhighlight>


<syntaxhighlight lang="yaml" enclose="div">
<syntaxhighlight lang="yaml" enclose="div">
Line 283: Line 276:
The registry file stores the state and location from which Filbeat was reading last. Under Logstash-Forwarder it was called .logstash-fowarder. For Filebeat it was renamed to .filebeat or /usr/lib/filebeat/registry if you install from packages or C:\ProgramData\filebeat\registry if you run as a Windows service.
The registry file stores the state and location from which Filbeat was reading last. Under Logstash-Forwarder it was called .logstash-fowarder. For Filebeat it was renamed to .filebeat or /usr/lib/filebeat/registry if you install from packages or C:\ProgramData\filebeat\registry if you run as a Windows service.
</syntaxhighlight>
</syntaxhighlight>
:ここが rc1 とは違う...
<syntaxhighlight lang="yaml" enclose="div">
  registry_file: /var/lib/filebeat/registry
</syntaxhighlight>
:とすることで記述にあわせられそうだが、どうもフォーマットも違っていそう...


== メンテナンス ==
== メンテナンス ==