首页
学习
活动
专区
圈层
工具
发布
社区首页 >问答首页 >Logstash netflow插件配置错误

Logstash netflow插件配置错误
EN

Server Fault用户
提问于 2016-10-05 15:27:25
回答 1查看 463关注 0票数 1

我试图使用logstash来使用netflow插件从VMware ESXi收集流量信息。

我在Ubuntu16.04.1上安装了最新版本的logstash和elasticsearch,并安装了openjdk 8。

我创建了这个配置文件:

代码语言:javascript
复制
input {
    udp {
      host => localhost
      port => 9995
      codec => netflow {
        versions => [10]
        target => ipfix
      }
      type => ipfix
    }
  }

  output {
    stdout { codec => rubydebug }
      elasticsearch {
        index => "logstash_netflow5-%{+YYYY.MM.dd}"
        host => "localhost"
      }
  }

但当我执行:

代码语言:javascript
复制
logstash -f logstash-staticfile-netflow.conf

我得到了以下信息:

代码语言:javascript
复制
Pipeline aborted due to error {:exception=>"LogStash::ConfigurationError", :backtrace=>["/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/config/mixin.rb:88:in config_init'", "org/jruby/RubyHash.java:1342:ineach'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/config/mixin.rb:72:in config_init'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/outputs/base.rb:79:ininitialize'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/output_delegator.rb:74:in register'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/pipeline.rb:181:instart_workers'", "org/jruby/RubyArray.java:1613:in each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/pipeline.rb:181:instart_workers'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/pipeline.rb:136:in run'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/agent.rb:491:instart_pipeline'"], :level=>:error}
No matching template for flow id 256 {:level=>:warn}
stopping pipeline {:id=>"main"}

你知道我为什么会犯这个错误吗?提前感谢您的帮助!

EN

回答 1

Server Fault用户

回答已采纳

发布于 2016-10-10 19:47:17

我发现了问题,错误是在logstash2.x中配置语法发生了变化,我必须替换

代码语言:javascript
复制
host => "localhost"

通过以下方式:

代码语言:javascript
复制
hosts => ["localhost"]
票数 0
EN
页面原文内容由Server Fault提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接:

https://serverfault.com/questions/807283

复制
相关文章

相似问题

领券
问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档