将文件内容从 filebeat 发送到 logstash 时出现问题

Question

我是 ELK 的新手，我正在尝试使用 ELK 堆栈进行一些实践。我正在 WINDOWS 执行以下操作， 1.安装Elasticsearch，用http://localhost:9200/确认 2. 安装logstash，使用http://localhost:9600/确认 logstash -f logstash.config

    logstash.config file looks like this,
    input {
        beats {
            port => "5043"
        }
    }
    # The filter part of this file is commented out to indicate that it is
    # optional.
    # filter {
    #
    # }
    output {
        elasticsearch { hosts => ["localhost:9200"] }
    }


 3. Installed Kibana, confirmed using http://localhost:5601

    Now, i want to use filebeat to pass a log file to logstash which parses and forwards it to Elastic search for indexing. and finally kibana displays it.

    In order to do that, 
"

i did the following changes in filebeat.yml.
change 1 :
In Filebeat prospectors, i added 
paths:
    # - /var/log/*.log
     - D:\KibanaInput\vinod.log
Contents of vinod.log: Hello World from FileBeat.

Change 2:
In Outputs,
#output.logstash:
  # The Logstash hosts
   hosts: ["localhost:9600"]

when i run the below command,
filebeat  -c filebeat.yml -e

i get the below error,
ERR Connecting error publishing events (retrying): Failed to parse JSON response: json: cannot unmarshal string into Go value of type struct { Number string }

Please let me know what mistake i am doing.

Answer 1

你走的路很好。

请确认以下内容：

在您的 filebeat.yml 中确保您在 output.logstash: 行中没有评论，这对应于您的更改编号 2。
确保您的消息被正确理解。在您的 logstash 管道配置文件中添加以下输出。

输出{ 标准输出 { 编解码器 => json } }

3.Start 您的 logstash 处于调试模式。

4.If您正在读取具有相同内容的相同文件确保您删除了 filebeat 中的注册表文件。 ($filebeatHome/data/registry)

5.Read 日志文件。

将文件内容从 filebeat 发送到 logstash 时出现问题

Issue while sending file content from filebeat to logstash

logstash

elastic-stack

filebeat