虚拟机上Filebeat很久没用了。今天准备用来上报Nginx日志到ES分析问题，结果服务一直启动失败
[root@MyCentOS-01 filebeat]# systemctl start filebeatnginx
[root@MyCentOS-01 filebeat]# systemctl status filebeatnginx
● filebeatnginx.service - filebeatnginx
Loaded: loaded (/usr/lib/systemd/system/filebeatnginx.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Tue 2022-09-06 15:45:01 CST; 1s ago
Docs: https://www.elastic.co/guide/en/beats/filebeat/current/index.html
Process: 8354 ExecStart=/usr/local/filebeat/filebeat -c /usr/local/filebeat/filebeat.yml -path.home /usr/local/filebeat -path.config /usr/local/filebeat -path.data /usr/local/filebeat/data
-path.logs /usr/local/filebeat/logs (code=exited, status=1/FAILURE)
Main PID: 8354 (code=exited, status=1/FAILURE)
Sep 06 15:45:01 MyCentOS-01 systemd[1]: Unit filebeatnginx.service entered failed state.
Sep 06 15:45:01 MyCentOS-01 systemd[1]: filebeatnginx.service failed.
Sep 06 15:45:01 MyCentOS-01 systemd[1]: filebeatnginx.service holdoff time over, scheduling restart.
Sep 06 15:45:01 MyCentOS-01 systemd[1]: Stopped filebeatnginx.
Sep 06 15:45:01 MyCentOS-01 systemd[1]: start request repeated too quickly for filebeatnginx.service
Sep 06 15:45:01 MyCentOS-01 systemd[1]: Failed to start filebeatnginx.
Sep 06 15:45:01 MyCentOS-01 systemd[1]: Unit filebeatnginx.service entered failed state.
Sep 06 15:45:01 MyCentOS-01 systemd[1]: filebeatnginx.service failed.
用命令行方式启动Filebeat提示如下
[root@MyCentOS-01 filebeat]# ./filebeat
Exiting: error loading config file: config file ("filebeat.yml") can only be writable by the owner but the permissions are "-rwxrwxrwx" (to fix the permissions use: 'chmod go-w /usr/local/fi
lebeat/filebeat.yml')
才想起来有次为了编辑方便，将filebeat.yml设置为所有人可读可写了
执行 chmod go-w filebeat.yml
再次启动Filebeat服务成功
[root@MyCentOS-01 filebeat]# chmod go-w filebeat.yml
[root@MyCentOS-01 filebeat]# systemctl start filebeatnginx
[root@MyCentOS-01 filebeat]# systemctl status filebeatnginx
● filebeatnginx.service - filebeatnginx
Loaded: loaded (/usr/lib/systemd/system/filebeatnginx.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2022-09-06 15:50:30 CST; 7s ago
Docs: https://www.elastic.co/guide/en/beats/filebeat/current/index.html
Main PID: 16959 (filebeat)
CGroup: /system.slice/filebeatnginx.service
└─16959 /usr/local/filebeat/filebeat -c /usr/local/filebeat/filebeat.yml -path.home /usr/local/filebeat -path.config /usr/local/filebeat -path.data /usr/local/filebeat/data -pa...
Sep 06 15:50:30 MyCentOS-01 systemd[1]: Started filebeatnginx.
