【发布时间】：2018-10-09 15:03:09
【问题描述】：
我正在尝试验证我的 logstash 配置。
使用：
sudo -u logstash /usr/share/logstash/bin/logstash --path.settings -t -f /etc/logstash/conf.d
我收到以下错误：
penJDK 64-Bit Server VM 警告：如果处理器数量为 预计从一个增加，那么你应该配置的数量 并行 GC 线程适当地使用 -XX:ParallelGCThreads=N 警告：找不到通常位于的 logstash.yml $LS_HOME/config 或 /etc/logstash。您可以使用指定路径 --path.settings。继续使用默认设置在路径 /tmp/hsperfdata_logstash/-t/log4j2.properties 中找不到 log4j2 配置。 使用将错误记录到控制台的默认配置 [INFO] 2018-10-09 14:56:50.240 [main] 脚手架-初始化模块 {:module_name=>"fb_apache", :directory=>"/usr/share/logstash/modules/fb_apache/configuration"} [INFO] 2018-10-09 14:56:50.265 [main] 脚手架 - 初始化模块 {:module_name=>"netflow", :directory=>"/usr/share/logstash/modules/netflow/configuration"} [信息 ] 2018-10-09 14:56:50.378 [main] writabledirectory - 创建 目录 {:setting=>"path.queue", :path=>"/usr/share/logstash/data/queue"} [信息] 2018-10-09 14:56:50.380 [main] writabledirectory - 创建目录 {:setting=>"path.dead_letter_queue", :path=>"/usr/share/logstash/data/dead_letter_queue"} [警告] 2018-10-09 14:56:51.099 [LogStash::Runner] 多本地 - 忽略 'pipelines.yml' 文件，因为模块或命令行选项是 指定 [INFO] 2018-10-09 14:56:51.126 [LogStash::Runner] 代理 - 找不到持久的 UUID 文件。生成新的 UUID {:uuid=>"80207611-d5b8-47dd-b229-23c2ade385ae", :path=>"/usr/share/logstash/data/uuid"} [信息] 2018-10-09 14:56:51.568 [LogStash::Runner] runner - 启动 Logstash {"logstash.version"=>"6.2.4"} [信息] 2018-10-09 14:56:52.021 [API Webserver] 代理 - 成功启动 Logstash API 端点 {:port=>9600} [错误] 2018-10-09 14:56:53.586 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:22] beats - 节拍输入插件设置无效：
输入{ 节拍{ # 这个设置必须是路径 # 文件不存在或无法打开 /etc/pki/tls/certs/logstash-forwarder.crt ssl_certificate => "/etc/pki/tls/certs/logstash-forwarder.crt" ... } } [错误] 2018-10-09 14:56:53.588 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib /stud/task.rb:22] beats - 节拍输入插件设置无效：
输入{ 节拍{ # 这个设置必须是路径 # 文件不存在或无法打开 /etc/pki/tls/private/logstash-forwarder.key ssl_key => "/etc/pki/tls/private/logstash-forwarder.key" ... } } [错误] 2018-10-09 14:56:53.644 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib /stud/task.rb:22] 代理 - 无法执行操作 {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"有些事 你的配置有问题。", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/config/mixin.rb:89:in
config_init'", "/usr/share/logstash/logstash-core/lib/logstash/inputs/base.rb:62:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/plugins/plugin_factory.rb:89:inplugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:112:inplugin'", "(eval):8:in<eval>'", "org/jruby/RubyKernel.java:994:ineval'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:84:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:169:ininitialize'", “/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:inexecute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:315:inblock 在收敛状态'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:inwith_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:312:inblock 在收敛状态'", "org/jruby/RubyArray.java:1734:ineach'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:299:inconverge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:166:inblock in converge_state_and_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:inwith_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:inconverge_state_and_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:90:inexecute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:348:inblock in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:inblock in initialize'"]}
我将不胜感激。
【问题讨论】：
标签： elasticsearch configuration logstash