CODEWITHSUNDEEP
elasticsearchcentossystemcentos7filebeat
BenjaFriend
BenjaFriend

Reputation: 664

Filebeat Service will not start on CentOS 7

Filebeat will not start on my CentOS 7 box. I have Logstash running fine, Kibana can be accessed, and I even installed packetbeat to see if it was something wrong with the beats, but Packetbeat works fine.

Here is what is happening when I try to start filebeat:

System status failure

Here are the filebeat logs:

Filebeat Logs

My Filebeat config passes the '-configtest' option, so it can't be that. The only output that I get from the debugging option is this:

Exiting: Could not start registrar: Error loading state: Error decoding states: EOF

I have also tried these two commands to no avail:

systemctl reset-failed filebeat.service
systemctl start filebeat.service

Anyone have any other commands to try to try and get this to work?

Upvotes: 1

Views: 2079

Answers (1)

BenjaFriend
BenjaFriend

Reputation: 664

You need to delete the registry file, this is a known issue appartently. Forum post with an answer from the ELK guys

rm -r /var/lib/filebeat/registry
systemctl reset-failed filebeat
systemctl start filebeat

Upvotes: 3

Related Questions