2021-12-14T07:06:28.504Z ERROR [elasticsearch] elasticsearch/client.go:224 failed to perform any bulk index operations: Post "http://elasticsearch:9200/_bulk": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
2021-12-14T07:06:30.401Z ERROR [publisher_pipeline_output] pipeline/output.go:180 failed to publish events: Post "http://elasticsearch:9200/_bulk": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
你的架构是 filebeat 直接扔去? 现在日志提示你 超时报错,请求取消了。这日志是 filebeat上的日志吗?
一般玩法,是filebeat扔去MQ,然后再去消费消息,再去可视化。
好奇你这边架构?