org.logstash.beats.BeatsParser$InvalidFrameProtocolException: Invalid Frame Type, received:10565

org.logstash.beats.BeatsParser$InvalidFrameProtocolException: Invalid Frame Type, received:105/65

网上clone了一个项目用到了elk，不太熟悉，在网上随便拷了一份配置

input {
  beats {
    port => 5044
  }
}

output {
  elasticsearch {
    hosts => ["http://localhost:9200"]
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
    #user => "elastic"
    #password => "changeme"
  }
}

注意：里面是beats是一个插件，而这个springboot项目并没有使用，所有应该修改为tcp的方式

input {
  tcp {
    mode => "server"
    host => "0.0.0.0"
    port => 5044
    codec => json_lines
  }
}

output {
  elasticsearch {
    hosts => ["http://localhost:9200"]
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
    #user => "elastic"
    #password => "changeme"
  }
}