是时候用 ES 拯救发际线啦

ELK与elastalert 集成测试时报错,望大佬们来瞧一瞧看一看

Elasticsearch | 作者 natashare | 发布于2018年06月08日 | 阅读数:6953

不知道这20错在哪,空格也不多。[root@ELK example_rules]# elastalert-test-rule my_rule.yaml
Traceback (most recent call last):
  File "/usr/bin/elastalert-test-rule", line 11, in <module>
    load_entry_point('elastalert==0.1.32', 'console_scripts', 'elastalert-test-rule')()
  File "/usr/lib/python2.7/site-packages/elastalert-0.1.32-py2.7.egg/elastalert/test_rule.py", line 381, in main
    test_instance.run_rule_test()
  File "/usr/lib/python2.7/site-packages/elastalert-0.1.32-py2.7.egg/elastalert/test_rule.py", line 360, in run_rule_test
    rule_yaml = load_rule_yaml(args.file)
  File "/usr/lib/python2.7/site-packages/elastalert-0.1.32-py2.7.egg/elastalert/config.py", line 130, in load_rule_yaml
    loaded = yaml_loader(filename)
  File "build/bdist.linux-x86_64/egg/staticconf/loader.py", line 168, in yaml_loader
  File "build/bdist.linux-x86_64/egg/yaml/__init__.py", line 71, in load
  File "build/bdist.linux-x86_64/egg/yaml/constructor.py", line 37, in get_single_data
  File "build/bdist.linux-x86_64/egg/yaml/composer.py", line 39, in get_single_node
  File "build/bdist.linux-x86_64/egg/yaml/parser.py", line 98, in check_event
  File "build/bdist.linux-x86_64/egg/yaml/parser.py", line 174, in parse_document_start
yaml.parser.ParserError: expected '<document start>', but found '<block mapping start>'
  in "my_rule.yaml", line 20, column 1
#####################################分界线########################
 9  es_port: 9200
 10
 11 # (OptionaL) Connect with SSL to Elasticsearch
 12 #use_ssl: True
 13
 14 # (Optional) basic-auth username and password for Elasticsearch
 15 #es_username: elastic
 16 #es_password: pRT3BFBt9JBeD91H9PcM
 17
 18 # (Required)
 19 # Rule name, must be unique
 20 name: elastalert_status
 
已邀请:

xiaoaps - 80后IT男

赞同来自:

我也是报这个错,你后来是如何解决的?
Traceback (most recent call last):
  File "/usr/local/bin/elastalert-test-rule", line 11, in <module>
    load_entry_point('elastalert==0.1.38', 'console_scripts', 'elastalert-test-rule')()
  File "/usr/local/lib/python2.7/site-packages/elastalert-0.1.38-py2.7.egg/elastalert/test_rule.py", line 463, in main
    test_instance.run_rule_test()
  File "/usr/local/lib/python2.7/site-packages/elastalert-0.1.38-py2.7.egg/elastalert/test_rule.py", line 432, in run_rule_test
    conf = self.load_conf(rule_yaml, args)
  File "/usr/local/lib/python2.7/site-packages/elastalert-0.1.38-py2.7.egg/elastalert/test_rule.py", line 371, in load_conf
    load_options(rules, conf, args.file)
  File "/usr/local/lib/python2.7/site-packages/elastalert-0.1.38-py2.7.egg/elastalert/config.py", line 183, in load_options
    raise EAException("Invalid Rule file: %s\n%s" % (filename, e))
elastalert.util.EAException: Invalid Rule file: config.yaml
 

zheniove

赞同来自:

[root@localhost elastalert]# elastalert-test-rule --alert example_rules/my_rule.yaml 
Traceback (most recent call last):
  File "/usr/local/bin/elastalert-test-rule", line 11, in <module>
    load_entry_point('elastalert==0.2.1', 'console_scripts', 'elastalert-test-rule')()
  File "build/bdist.linux-x86_64/egg/pkg_resources/__init__.py", line 561, in load_entry_point
  File "build/bdist.linux-x86_64/egg/pkg_resources/__init__.py", line 2631, in load_entry_point
  File "build/bdist.linux-x86_64/egg/pkg_resources/__init__.py", line 2291, in load
  File "build/bdist.linux-x86_64/egg/pkg_resources/__init__.py", line 2297, in resolve
  File "/usr/local/lib/python2.7/site-packages/elastalert/test_rule.py", line 61
    print('Invalid filter provided:', str(ea), file=sys.stderr)
                                                   ^
SyntaxError: invalid syntax
大神你解决了吗?,到底是啥原因呀!

要回复问题请先登录注册