ELK问题合集（20180805）

1.[2018-08-05T04:51:57,668][INFO ][o.e.x.s.a.AuthenticationService] [elk_server01] Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]

q1.png

解决方法：重新配置set-passwords ,确保密码是正确的

2.[2018-08-05T05:58:35,906][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#, :backtrace=>["/data/www/logstash_nginx/logstash-core/lib/logstash/settings.rb:37:in get_setting'", "/data/www/logstash_nginx/logstash-core/lib/logstash/settings.rb:70:inset_value'", "/data/www/logstash_nginx/logstash-core/lib/logstash/settings.rb:89:in block in merge'", "org/jruby/RubyHash.java:1343:ineach'", "/data/www/logstash_nginx/logstash-core/lib/logstash/settings.rb:89:in merge'", "/data/www/logstash_nginx/logstash-core/lib/logstash/settings.rb:138:invalidate_all'", "/data/www/logstash_nginx/logstash-core/lib/logstash/runner.rb:264:in execute'", "/data/www/logstash_nginx/vendor/bundle/jruby/2.3.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:inrun'", "/data/www/logstash_nginx/logstash-core/lib/logstash/runner.rb:219:in run'", "/data/www/logstash_nginx/vendor/bundle/jruby/2.3.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:inrun'", "/data/www/logstash_nginx/lib/bootstrap/environment.rb:67:in `

'"]}
[2018-08-05T05:58:35,924][ERROR][org.logstash.Logstash ] java.lang.IllegalStateException: org.jruby.exceptions.RaiseException: (SystemExit) exit

image.png

3.failed to load plugin class [org.elasticsearch.xpack.core.XPackPlugin]

image.png

解决方法：如果配置了x-pack ssl, 需要确认集群内的p12都一致，否则会导致报上面的错

image.png

image.png

4.2018-08-07T16:49:08.550+0800 ERROR instance/beat.go:667 Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: fail to get the Kibana version:HTTP GET request to /api/status fails: 401 Unauthorized. Response: {"statusCode":401,"error":"Unauthorized"}.
Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: fail to get the Kibana version:HTTP GET request to /api/status fails: 401 Unauthorized. Response: {"statusCode":401,"error":"Unauthorized"}.

image.png

解决方法：filebeat 连接kabana需要认证

image.png