ElK执行日志收集的时候logstash 报错:
Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of [^\r\n], "\r", "\n" at line 88, column 4 (byte 2523) after # }", :backtrace=>["D:/work/DevelopUtils/ES/logstash-7.6.1/logstash-core/lib/logstash/compiler.rb:47:in `compile_imperative'",
解决方案:
在88行 执行换行
然后保存 在执行命令即可!
原因
logstash 约定:确保在 # 注释后面有一个换行符