You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Otherwise it may end up being automatically closed by our bot. -->
SUMMARY
winlogbeat 7.4.2 will not start if logstash.port or elasticsearch.port is configured. it is not required anymore and has to be removed from the template so that the service winlogbeat start on windows:
ISSUE TYPE
Bug Report
ANSIBLE VERSION
STEPS TO REPRODUCE
playbook:
- name: install elastic beat exporter on windows serverhosts: allroles:
- role: winlogbeatvars:
winlogbeat_output: logstashlogstash:
host: [ 'logstash_hostname' ]
in winlogbeat.yml.j2 remove "port" to have elastic service started correctly.
TASK [winlogbeat : Start a service] ***************************************************************************
changed: [servername]
ACTUAL RESULTS
TASK [github_winlogbeat : Start a service] ********************************************************************
fatal: [servername]: FAILED!
=> {"changed": false, "exists": false, "msg": "failed to start service from paused state winlogbeat:
Service 'winlogbeat (winlogbeat)' resume failed."}
here is the error log from winlogbeat on windows:
2021-05-27T11:37:34.403+0200 INFO instance/beat.go:292 Setup Beat: winlogbeat; Version: 7.4.2
2021-05-27T11:37:34.403+0200 INFO instance/beat.go:385 winlogbeat stopped.
2021-05-27T11:37:34.445+0200 ERROR instance/beat.go:878 Exiting: error initializing publisher: 1 error: setting 'output.logstash.port' has been removed
The text was updated successfully, but these errors were encountered:
Otherwise it may end up being automatically closed by our bot. -->
SUMMARY
winlogbeat 7.4.2 will not start if logstash.port or elasticsearch.port is configured. it is not required anymore and has to be removed from the template so that the service winlogbeat start on windows:
ISSUE TYPE
ANSIBLE VERSION
STEPS TO REPRODUCE
playbook:
in
winlogbeat.yml.j2
remove "port" to have elastic service started correctly.EXPECTED RESULTS
ACTUAL RESULTS
here is the error log from winlogbeat on windows:
The text was updated successfully, but these errors were encountered: