You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
logstash_1_37f99be4cbfd | [2019-12-10T09:42:18,153][ERROR][logstash.agent ] An exception happened when converging configuration {:exception=>RuntimeError, :message=>"Could not fetch the configuration, message: The following config files contains non-ascii characters but are not UTF-8 encoded ["/usr/share/logstash/pipeline/logstash-input-blueliv-1.1.0.gem"]", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/agent.rb:156:in converge_state_and_update'", "/usr/share/logstash/x-pack/lib/monitoring/internal_pipeline_source.rb:49:in enable_monitoring'", "/usr/share/logstash/x-pack/lib/monitoring/internal_pipeline_source.rb:39:in update_license_state'", "/usr/share/logstash/x-pack/lib/license_checker/licensed.rb:39:in setup_license_checker'", "/usr/share/logstash/x-pack/lib/monitoring/internal_pipeline_source.rb:23:in initialize'", "/usr/share/logstash/x-pack/lib/monitoring/monitoring.rb:98:in after_agent'", "org/logstash/execution/EventDispatcherExt.java:71:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:361:in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:242:in run'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in run'", "/usr/share/logstash/lib/bootstrap/environment.rb:73:in
'"]}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,684][INFO ][org.reflections.Reflections] Reflections took 37 ms to scan 1 urls, producing 20 keys and 40 values
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,792][WARN ][logstash.outputs.elasticsearch] You are using a deprecated config setting "document_type" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Document types are being deprecated in Elasticsearch 6.0, and removed entirely in 7.0. You should avoid this feature If you have any questions about this, please visit the #logstash channel on freenode irc. {:name=>"document_type", :plugin=><LogStash::Outputs::ElasticSearch bulk_path=>"/_monitoring/bulk?system_id=logstash&system_api_version=7&interval=1s", hosts=>[http://elasticsearch:9200], sniffing=>false, manage_template=>false, id=>"7d7dfa0f023f65240aeb31ebb353da5a42dc782979a2bd7e26e28b7cbd509bb3", document_type=>"%{[@metadata][document_type]}", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_d3203415-c212-4973-8e20-fd9db51eba25", enable_metric=>true, charset=>"UTF-8">, workers=>1, template_name=>"logstash", template_overwrite=>false, doc_as_upsert=>false, script_type=>"inline", script_lang=>"painless", script_var_name=>"event", scripted_upsert=>false, retry_initial_interval=>2, retry_max_interval=>64, retry_on_conflict=>1, ilm_enabled=>"auto", ilm_rollover_alias=>"logstash", ilm_pattern=>"{now/d}-000001", ilm_policy=>"logstash-policy", action=>"index", ssl_certificate_verification=>true, sniffing_delay=>5, timeout=>60, pool_max=>1000, pool_max_per_route=>100, resurrect_delay=>5, validate_after_inactivity=>10000, http_compression=>false>}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,886][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elasticsearch:9200/]}}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,900][WARN ][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=>"http://elasticsearch:9200/"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,907][INFO ][logstash.outputs.elasticsearch] ES Output version determined {:es_version=>7}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,909][WARN ][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the type event field won't be used to determine the document _type {:es_version=>7}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,921][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://elasticsearch:9200"]}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,010][INFO ][logstash.javapipeline ] Starting pipeline {:pipeline_id=>".monitoring-logstash", "pipeline.workers"=>1, "pipeline.batch.size"=>2, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>2, :thread=>"#<Thread:0x72dea048 run>"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,051][INFO ][logstash.javapipeline ] Pipeline started {"pipeline.id"=>".monitoring-logstash"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,139][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:".monitoring-logstash"], :non_running_pipelines=>[]}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,436][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:21,252][INFO ][logstash.javapipeline ] Pipeline terminated {"pipeline.id"=>".monitoring-logstash"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:21,973][INFO ][logstash.runner ] Logstash shut down.
wazuh-blueliv-docker_logstash_1_37f99be4cbfd exited with code 0
The text was updated successfully, but these errors were encountered:
logstash_1_37f99be4cbfd | [2019-12-10T09:42:18,153][ERROR][logstash.agent ] An exception happened when converging configuration {:exception=>RuntimeError, :message=>"Could not fetch the configuration, message: The following config files contains non-ascii characters but are not UTF-8 encoded ["/usr/share/logstash/pipeline/logstash-input-blueliv-1.1.0.gem"]", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/agent.rb:156:in
'"]}converge_state_and_update'", "/usr/share/logstash/x-pack/lib/monitoring/internal_pipeline_source.rb:49:in
enable_monitoring'", "/usr/share/logstash/x-pack/lib/monitoring/internal_pipeline_source.rb:39:inupdate_license_state'", "/usr/share/logstash/x-pack/lib/license_checker/licensed.rb:39:in
setup_license_checker'", "/usr/share/logstash/x-pack/lib/monitoring/internal_pipeline_source.rb:23:ininitialize'", "/usr/share/logstash/x-pack/lib/monitoring/monitoring.rb:98:in
after_agent'", "org/logstash/execution/EventDispatcherExt.java:71:inexecute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:361:in
execute'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:inrun'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:242:in
run'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:inrun'", "/usr/share/logstash/lib/bootstrap/environment.rb:73:in
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,684][INFO ][org.reflections.Reflections] Reflections took 37 ms to scan 1 urls, producing 20 keys and 40 values
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,792][WARN ][logstash.outputs.elasticsearch] You are using a deprecated config setting "document_type" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Document types are being deprecated in Elasticsearch 6.0, and removed entirely in 7.0. You should avoid this feature If you have any questions about this, please visit the #logstash channel on freenode irc. {:name=>"document_type", :plugin=><LogStash::Outputs::ElasticSearch bulk_path=>"/_monitoring/bulk?system_id=logstash&system_api_version=7&interval=1s", hosts=>[http://elasticsearch:9200], sniffing=>false, manage_template=>false, id=>"7d7dfa0f023f65240aeb31ebb353da5a42dc782979a2bd7e26e28b7cbd509bb3", document_type=>"%{[@metadata][document_type]}", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_d3203415-c212-4973-8e20-fd9db51eba25", enable_metric=>true, charset=>"UTF-8">, workers=>1, template_name=>"logstash", template_overwrite=>false, doc_as_upsert=>false, script_type=>"inline", script_lang=>"painless", script_var_name=>"event", scripted_upsert=>false, retry_initial_interval=>2, retry_max_interval=>64, retry_on_conflict=>1, ilm_enabled=>"auto", ilm_rollover_alias=>"logstash", ilm_pattern=>"{now/d}-000001", ilm_policy=>"logstash-policy", action=>"index", ssl_certificate_verification=>true, sniffing_delay=>5, timeout=>60, pool_max=>1000, pool_max_per_route=>100, resurrect_delay=>5, validate_after_inactivity=>10000, http_compression=>false>}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,886][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elasticsearch:9200/]}}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,900][WARN ][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=>"http://elasticsearch:9200/"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,907][INFO ][logstash.outputs.elasticsearch] ES Output version determined {:es_version=>7}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,909][WARN ][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the
type
event field won't be used to determine the document _type {:es_version=>7}logstash_1_37f99be4cbfd | [2019-12-10T09:42:19,921][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://elasticsearch:9200"]}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,010][INFO ][logstash.javapipeline ] Starting pipeline {:pipeline_id=>".monitoring-logstash", "pipeline.workers"=>1, "pipeline.batch.size"=>2, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>2, :thread=>"#<Thread:0x72dea048 run>"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,051][INFO ][logstash.javapipeline ] Pipeline started {"pipeline.id"=>".monitoring-logstash"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,139][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:".monitoring-logstash"], :non_running_pipelines=>[]}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:20,436][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:21,252][INFO ][logstash.javapipeline ] Pipeline terminated {"pipeline.id"=>".monitoring-logstash"}
logstash_1_37f99be4cbfd | [2019-12-10T09:42:21,973][INFO ][logstash.runner ] Logstash shut down.
wazuh-blueliv-docker_logstash_1_37f99be4cbfd exited with code 0
The text was updated successfully, but these errors were encountered: