完全按照教程撸下来，发现索引根本无法启用ES存储。

[i0668]

我查看了/var/log/filebeat，有这么一行警告： 2019-08-06T08:24:34Z WARN Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning. 这是我启动log-pilot的参数：

docker run -d -it \
    --name=log-pilot \
    -e TZ=Asia/Shanghai \
    -e FLUENTD_OUTPUT=elasticsearch \
    -e ELASTICSEARCH_HOST=114.114.114.114 \
    -e ELASTICSEARCH_PORT=2900 \
    -v /var/run/docker.sock:/var/run/docker.sock \
    -v /:/host \
    --privileged  \
    registry.cn-hangzhou.aliyuncs.com/acs/log-pilot:0.9.7-filebeat

es端口是通的

[iventong]

进入容器内查看日志 可能大部分用了这个参数 FLUENTD_OUTPUT=elasticsearch

一般日志会显示 WARN Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning. 其实他有2个版本 registry.cn-hangzhou.aliyuncs.com/acs/log-pilot:0.9.7-filebeat registry.cn-hangzhou.aliyuncs.com/acs/log-pilot:0.9.7-fluentd

修改一下就可以了~

docker run -d
-v /var/run/docker.sock:/var/run/docker.sock
-v /:/host
--privileged
-e FILEBEAT_OUTPUT=elasticsearch
-e ELASTICSEARCH_HOST=
-e ELASTICSEARCH_PORT=9200
registry.cn-hangzhou.aliyuncs.com/acs/log-pilot:0.9.7-filebeat