执行操作失败：action=>LogStash::PipelineAction::Create/pipeline_id:main答案

【问题标题】：Failed to execute action :action=>LogStash::PipelineAction::Create/pipeline_id:main执行操作失败：action=>LogStash::PipelineAction::Create/pipeline_id:main
【发布时间】：2019-09-30 05:07:43
【问题描述】：

我在 CentOS7 虚拟机上安装了 ELK 堆栈版本 7.0.0，但在 Logstash 服务启动期间遇到了问题：

[错误] 2019-05-13 08:21:37.359 [Converge PipelineAction::Create] 代理 - 无法执行操作 {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=> "MultiJson::ParseError", :message=>"JrJackson::ParseError", :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/multi_json-1.13.1/lib /multi_json/adapter.rb:20:in load'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/multi_json-1.13.1/lib/multi_json.rb:122:inload'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/avro-1.8.2/lib/avro/schema.rb :36:in parse'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-avro-3.2.3-java/lib/logstash/codecs/avro.rb:69:inregister'", "/usr/share/logstash/logstash-core/lib/logstash/codecs/base.rb:18:in initialize'", "org/logstash/plugins/PluginFactoryExt.java:255:inplugin'", "org/logstash/execution/ JavaBasePipelineExt.java:50:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:inblock in converge_state'"]}

请帮助找出解决此问题的方法。另一个 Centos VM 上的类似安装工作正常。

【问题讨论】：

标签： ruby logstash elk

【解决方案1】：

我认为你是配置 json 格式而不是在 logstash.yml 文件中解析

把简单的配置比如吹

input {     
  beats {
    port => 5044
 }
}
output {
 stdout { codec => rubydebug }  

 elasticsearch {
  hosts => ["http://ip:9200"]
 }
}

【讨论】：