API tools faq
paste
Guest User

Untitled

a guest
Jul 17th, 2020
113
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.59 KB | None | 0 0
raw download clone embed print report
  1. [root@server150 filebeat]# pwd
  2. /var/log/filebeat
  3. [root@server150 filebeat]# ll
  4. total 36
  5. -rw------- 1 root root 529 Jul 17 13:18 filebeat
  6. -rw------- 1 root root 529 Jul 17 13:17 filebeat.1
  7. -rw------- 1 root root 529 Jul 17 13:07 filebeat.2
  8. -rw------- 1 root root 8101 Jul 17 09:09 filebeat.3
  9. -rw------- 1 root root 529 Jul 17 09:02 filebeat.4
  10. -rw------- 1 root root 529 Jul 17 09:00 filebeat.5
  11. -rw------- 1 root root 529 Jul 17 09:00 filebeat.6
  12. -rw------- 1 root root 529 Jul 17 08:59 filebeat.7
  13. [root@server150 filebeat]#
  14. [root@server150 filebeat]#
  15. [root@server150 filebeat]# grep "" *
  16. filebeat:2020-07-17T13:18:12.797Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  17. filebeat:2020-07-17T13:18:12.797Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  18. filebeat:2020-07-17T13:18:12.800Z INFO instance/beat.go:404 filebeat stopped.
  19. filebeat:2020-07-17T13:18:12.830Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
  20.  
  21.  
  22.  
  23. filebeat.1:2020-07-17T13:17:30.519Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  24. filebeat.1:2020-07-17T13:17:30.520Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  25. filebeat.1:2020-07-17T13:17:30.522Z INFO instance/beat.go:404 filebeat stopped.
  26. filebeat.1:2020-07-17T13:17:30.573Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
  27.  
  28.  
  29.  
  30. filebeat.2:2020-07-17T13:07:12.093Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  31. filebeat.2:2020-07-17T13:07:12.093Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  32. filebeat.2:2020-07-17T13:07:12.096Z INFO instance/beat.go:404 filebeat stopped.
  33. filebeat.2:2020-07-17T13:07:12.120Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
  34.  
  35.  
  36.  
  37. filebeat.3:2020-07-17T09:08:23.553Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  38. filebeat.3:2020-07-17T09:08:23.554Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  39. filebeat.3:2020-07-17T09:08:23.557Z INFO [seccomp] seccomp/seccomp.go:124 Syscall filter successfully installed
  40. filebeat.3:2020-07-17T09:08:23.557Z INFO [beat] instance/beat.go:983 Beat info {"system_info": {"beat": {"path": {"config": "/etc/filebeat", "data": "/var/lib/filebeat", "home": "/usr/share/filebeat", "logs": "/var/log/filebeat"}, "type": "filebeat", "uuid": "aa84fd5b-d016-4688-a4a1-172dbcf2054a"}}}
  41. filebeat.3:2020-07-17T09:08:23.557Z INFO [beat] instance/beat.go:992 Build info {"system_info": {"build": {"commit": "f79387d32717d79f689d94fda1ec80b2cf285d30", "libbeat": "7.8.0", "time": "2020-06-14T18:15:37.000Z", "version": "7.8.0"}}}
  42. filebeat.3:2020-07-17T09:08:23.557Z INFO [beat] instance/beat.go:995 Go runtime info {"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":4,"version":"go1.13.10"}}}
  43. filebeat.3:2020-07-17T09:08:23.559Z INFO [beat] instance/beat.go:999 Host info {"system_info": {"host": {"architecture":"x86_64","boot_time":"2020-07-09T11:44:16Z","containerized":false,"name":"server150","ip":["127.0.0.1/8","*serverip*/25"],"kernel_version":"3.10.0-1062.18.1.el7.x86_64","mac":["*cencored*"],"os":{"family":"redhat","platform":"centos","name":"CentOS Linux","version":"7 (Core)","major":7,"minor":8,"patch":2003,"codename":"Core"},"timezone":"UTC","timezone_offset_sec":0,"id":"3eec437c66d444a59ef5f075a429441d"}}}
  44. filebeat.3:2020-07-17T09:08:23.560Z INFO [beat] instance/beat.go:1028 Process info {"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"ambient":null}, "cwd": "/root", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 15807, "ppid": 13873, "seccomp": {"mode":"filter","no_new_privs":true}, "start_time": "2020-07-17T09:08:22.690Z"}}}
  45. filebeat.3:2020-07-17T09:08:23.560Z INFO instance/beat.go:310 Setup Beat: filebeat; Version: 7.8.0
  46. filebeat.3:2020-07-17T09:08:23.561Z INFO [publisher] pipeline/module.go:113 Beat name: server150
  47. filebeat.3:2020-07-17T09:08:23.562Z WARN beater/filebeat.go:156 Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
  48. filebeat.3:2020-07-17T09:08:23.562Z INFO [monitoring] log/log.go:118 Starting metrics logging every 30s
  49. filebeat.3:2020-07-17T09:08:23.562Z INFO instance/beat.go:463 filebeat start running.
  50. filebeat.3:2020-07-17T09:08:23.563Z WARN beater/filebeat.go:339 Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
  51. filebeat.3:2020-07-17T09:08:23.563Z INFO registrar/registrar.go:145 Loading registrar data from /var/lib/filebeat/registry/filebeat/data.json
  52. filebeat.3:2020-07-17T09:08:23.563Z INFO registrar/registrar.go:152 States Loaded from registrar: 3
  53. filebeat.3:2020-07-17T09:08:23.563Z INFO [crawler] beater/crawler.go:71 Loading Inputs: 1
  54. filebeat.3:2020-07-17T09:08:23.564Z INFO log/input.go:152 Configured paths: [/home/cowrie/cowrie/var/log/cowrie/cowrie.json*]
  55. filebeat.3:2020-07-17T09:08:23.564Z INFO [crawler] beater/crawler.go:141 Starting input (ID: %d)8338926647334833826
  56. filebeat.3:2020-07-17T09:08:23.564Z INFO [crawler] beater/crawler.go:108 Loading and starting Inputs completed. Enabled inputs: 1
  57. filebeat.3:2020-07-17T09:08:23.564Z INFO cfgfile/reload.go:164 Config reloader started
  58. filebeat.3:2020-07-17T09:08:23.564Z INFO cfgfile/reload.go:224 Loading of config files completed.
  59. filebeat.3:2020-07-17T09:08:26.556Z INFO [add_cloud_metadata] add_cloud_metadata/add_cloud_metadata.go:89 add_cloud_metadata: hosting provider type not detected.
  60. filebeat.3:2020-07-17T09:08:53.565Z INFO [monitoring] log/log.go:145 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":50,"time":{"ms":56}},"total":{"ticks":110,"time":{"ms":118},"value":0},"user":{"ticks":60,"time":{"ms":62}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":10},"info":{"ephemeral_id":"559b71fe-bcc2-44d3-93f4-c4ed0d9d33f7","uptime":{"ms":30055}},"memstats":{"gc_next":10685232,"memory_alloc":6338816,"memory_total":18378040,"rss":33447936},"runtime":{"goroutines":23}},"filebeat":{"events":{"added":3,"done":3},"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0},"reloads":1,"scans":1},"output":{"type":"logstash"},"pipeline":{"clients":1,"events":{"active":0,"filtered":3,"total":3}}},"registrar":{"states":{"current":3,"update":3},"writes":{"success":3,"total":3}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}}
  61. filebeat.3:2020-07-17T09:09:20.423Z INFO beater/filebeat.go:456 Stopping filebeat
  62. filebeat.3:2020-07-17T09:09:20.423Z INFO beater/crawler.go:148 Stopping Crawler
  63. filebeat.3:2020-07-17T09:09:20.423Z INFO beater/crawler.go:158 Stopping 1 inputs
  64. filebeat.3:2020-07-17T09:09:20.423Z INFO cfgfile/reload.go:227 Dynamic config reloader stopped
  65. filebeat.3:2020-07-17T09:09:20.423Z INFO [crawler] beater/crawler.go:163 Stopping input: 8338926647334833826
  66. filebeat.3:2020-07-17T09:09:20.423Z INFO input/input.go:138 input ticker stopped
  67. filebeat.3:2020-07-17T09:09:20.424Z INFO beater/crawler.go:178 Crawler stopped
  68. filebeat.3:2020-07-17T09:09:20.424Z INFO registrar/registrar.go:367 Stopping Registrar
  69. filebeat.3:2020-07-17T09:09:20.424Z INFO registrar/registrar.go:293 Ending Registrar
  70. filebeat.3:2020-07-17T09:09:20.473Z INFO [monitoring] log/log.go:153 Total non-zero metrics {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":60,"time":{"ms":64}},"total":{"ticks":120,"time":{"ms":132},"value":120},"user":{"ticks":60,"time":{"ms":68}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":10},"info":{"ephemeral_id":"559b71fe-bcc2-44d3-93f4-c4ed0d9d33f7","uptime":{"ms":56961}},"memstats":{"gc_next":10685232,"memory_alloc":6527600,"memory_total":18566824,"rss":33710080},"runtime":{"goroutines":13}},"filebeat":{"events":{"added":3,"done":3},"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0},"reloads":1,"scans":1},"output":{"type":"logstash"},"pipeline":{"clients":0,"events":{"active":0,"filtered":3,"total":3}}},"registrar":{"states":{"current":3,"update":3},"writes":{"success":4,"total":4}},"system":{"cpu":{"cores":4},"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0125,"5":0.0025}}}}}}
  71. filebeat.3:2020-07-17T09:09:20.473Z INFO [monitoring] log/log.go:154 Uptime: 56.964488253s
  72. filebeat.3:2020-07-17T09:09:20.473Z INFO [monitoring] log/log.go:131 Stopping metrics logging.
  73. filebeat.3:2020-07-17T09:09:20.473Z INFO instance/beat.go:469 filebeat stopped.
  74.  
  75.  
  76.  
  77. filebeat.4:2020-07-17T09:02:04.232Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  78. filebeat.4:2020-07-17T09:02:04.233Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  79. filebeat.4:2020-07-17T09:02:04.235Z INFO instance/beat.go:404 filebeat stopped.
  80. filebeat.4:2020-07-17T09:02:04.270Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
  81.  
  82.  
  83.  
  84. filebeat.5:2020-07-17T09:00:55.067Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  85. filebeat.5:2020-07-17T09:00:55.068Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  86. filebeat.5:2020-07-17T09:00:55.070Z INFO instance/beat.go:404 filebeat stopped.
  87. filebeat.5:2020-07-17T09:00:55.098Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
  88.  
  89.  
  90.  
  91. filebeat.6:2020-07-17T09:00:09.433Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  92. filebeat.6:2020-07-17T09:00:09.434Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  93. filebeat.6:2020-07-17T09:00:09.437Z INFO instance/beat.go:404 filebeat stopped.
  94. filebeat.6:2020-07-17T09:00:09.476Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
  95.  
  96.  
  97.  
  98. filebeat.7:2020-07-17T08:59:58.100Z INFO instance/beat.go:647 Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
  99. filebeat.7:2020-07-17T08:59:58.100Z INFO instance/beat.go:655 Beat ID: aa84fd5b-d016-4688-a4a1-172dbcf2054a
  100. filebeat.7:2020-07-17T08:59:58.103Z INFO instance/beat.go:404 filebeat stopped.
  101. filebeat.7:2020-07-17T08:59:58.140Z ERROR instance/beat.go:958 Exiting: data path already locked by another beat. Please make sure that multiple beats are not sharing the same data path (path.data).
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!