安装完Logstash,目录"/var/lib/logstash/queue" 的所有者是root;Logstash用户对其没有写权限。
[root@dycipvr00534 logstash]# ll
total 4
drwxr-xr-x 2 root root 6 Dec 13 08:10 dead_letter_queue
drwxr-xr-x 3 root root 20 Dec 13 08:12 plugins
drwxr-xr-x 2 root root 6 Dec 13 08:10 queue
-rw-r--r-- 1 root root 36 Dec 13 08:10 uuid
启动Logstash报错:
[2019-12-13T15:25:51,057][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#<ArgumentError: Path "/var/lib/logstash/queue" must be a writable directory. It is not writable.>, :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:447:in `validate'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:229:in `validate_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:140:in `block in validate_all'", "org/jruby/RubyHash.java:1419:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:139:in `validate_all'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:278:in `execute'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:237:in `run'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:73:in `<main>'"]}
[2019-12-13T15:25:51,064][ERROR][org.logstash.Logstash ] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit
修改目录"/var/lib/logstash/queue"的所有者,所属组都为Logstash
[root@dycipvr00534 logstash]# pwd
/var/lib/logstash
[root@dycipvr00534 logstash]# cd ..
[root@dycipvr00534 lib]# chown -R logstash logstash
[root@dycipvr00534 lib]# chgrp -R logstash logstash
[root@dycipvr00534 lib]# ll
total 4
drwxrwxr-x 5 logstash logstash 84 May 16 2019 logstash
我是使用的rpm方式安装的Logstash,版本为6.8.0,使用tar包方式安装的同学请不要看。