logspout写：连接被拒绝

问题描述：

# logspout v3.2-dev-custom by gliderlabs 
# adapters: raw tcp logstash udp syslog 
# options : persist:/mnt/routes 
# jobs : http[]:80 pump routes 
# routes : 
# ADAPTER  ADDRESS   CONTAINERS  SOURCES OPTIONS 
# logstash 0.0.0.0:5000       map[] 
2016/11/17 07:15:57 logstash: could not write:write udp 127.0.0.1:34146->127.0.0.1:5000: write: connection refused

后，我开始适配器 sudo docker run --name="logspout" --volume=/var/run/docker.sock:/var/run/docker.sock -e ROUTE_URIS=logstash://0.0.0.0:5000 c045f1a3472b

logstash 5.0泊坞窗容器与日志

Sending Logstash's logs to /var/log/logstash which is now configured via  log4j2.properties 
07:04:11.987 [[main]-pipeline-manager] INFO logstash.inputs.tcp -   Automatically switching from json to json_lines codec {:plugin=>"tcp"} 
07:04:11.987 [[main]<udp] INFO logstash.inputs.udp - Starting UDP listener {:address=>"0.0.0.0:5000"} 
07:04:12.003 [[main]-pipeline-manager] INFO logstash.inputs.tcp - Starting tcp input listener {:address=>"0.0.0.0:5000"} 
07:04:12.409 [[main]-pipeline-manager] INFO logstash.outputs.elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=> ["https://~hidden~:[email protected]:9243"]}} 
07:04:12.410 [[main]-pipeline-manager] INFO logstash.outputs.elasticsearch - Using mapping template from {:path=>nil} 
07:04:13.612 [[main]-pipeline-manager] INFO logstash.outputs.elasticsearch - Attempting to install template {:manage_template=>{"template"=>"logstash-*", "version"=>50001, "settings"=>{"index.refresh_interval"=>"5s"}, "mappings"=>{"_default_"=>{"_all"=>{"enabled"=>true, "norms"=>false}, "dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword"}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date", "include_in_all"=>false}, "@version"=>{"type"=>"keyword", "include_in_all"=>false}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}} 
07:04:13.705 [[main]-pipeline-manager] INFO logstash.outputs.elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["fc4fba7c82d6102f5c1a224f0e9f2e9a.us-east-1.aws.found.io:9243"]} 
07:04:13.710 [[main]-pipeline-manager] INFO logstash.pipeline - Starting pipeline {"id"=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>125} 
07:04:13.717 [[main]-pipeline-manager] INFO logstash.pipeline - Pipeline main started 
07:04:13.802 [Api Webserver] INFO logstash.agent - Successfully started  Logstash API endpoint {:port=>9600}

运行

我试图使用logspout和logstash将我的单独docker容器日志发送到弹性云，其中logstash，nginx，web等位于ec2上实例。谢谢您的帮助。

看来你正在尝试写入本地主机，当我猜测logstash和logspout在不同的容器中。你能分享一些关于你的设置吗？撰写？联网？每个容器如何运行？ – johnharris85

嘿@ johnharris85！感谢您指引我走向正确的方向。是的，错误是将它写在主机上而不是logstash容器上。使用遗留链接2个容器解决了问题。刚刚用两个容器创建了docker-compose.yml并解决了问题。再次感谢。 –

答

当在单独的容器中运行logstash和logspout时，我有同样的确切问题。在我的情况下，logspout试图在logstash准备好之前写入logstash，这导致logspout容器出错，然后崩溃。它已通过将RETRY_SEND环境变量添加到docker-compose文件中的logspout服务中解决。

logspout写：连接被拒绝

相关推荐