elasticsearch安装x-pack之后,filebeat直接传数据到es,报错,提示链接不上,请问这个怎么解决?

6.2版本

WX20180530-200225.png

 
已邀请:

Atom - beat-logstash-elasticsearch-kabana

赞同来自:

已经找到解决办法了,
  1. 创建一个角色
    • POST _xpack/security/role/filebeat_writer{  "cluster": ["manage_index_templates", "monitor"],  "indices": [    {      "names": [ "filebeat-*" ],       "privileges": ["write","create_index"]    }  ]}
  2. 创建一个用户
    • POST /_xpack/security/user/filebeat_internal{  "password" : "x-pack-test-password",  "roles" : [ "filebeat_writer"],  "full_name" : "Internal Filebeat User"}
  3. filebeat中添加对应的配置
    • output.elasticsearch:    hosts: ["localhost:9200"]    index: "filebeat"    username: "filebeat_internal"    password: "x-pack-test-password"

 
 
参考:
https://www.elastic.co/guide/e ... .html
https://discuss.elastic.co/t/w ... 580/2

要回复问题请先登录注册