1024以前端口需要root用户来执行

最新推荐文章于 2023-01-12 19:39:05 发布

liutaochn

最新推荐文章于 2023-01-12 19:39:05 发布

阅读量3k

点赞数

CC 4.0 BY-SA版权

文章标签： logstash syslog linux

本文链接：https://blog.youkuaiyun.com/liutaochn/article/details/71710081

本文记录了一次使用Logstash收集rsyslog日志时遇到的问题，包括tcp和udp均无法启用的情况，并给出了最终解决方案：需要切换到root用户才能正常运行。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

在配置logstash收集rsyslog日志时，一直抱报错，tcp和udp都无法启用。使用netstat -nap |grep 514也看不到任何进程

{:timestamp=>"2017-05-12T10:27:57.597000+0800", :message=>"syslog listener died", :protocol=>:tcp, :address=>"0.0.0.0:514", :exception=>#<SocketError: initialize: name or service not known>, :backtrace=>["org/jruby/ext/socket/RubyTCPServer.java:126:in `initialize'", "org/jruby/RubyIO.java:871:in `new'", "/opt/logstash-2.4.0/vendor/bundle/jruby/1.9/gems/logstash-input-syslog-2.0.5/lib/logstash/inputs/syslog.rb:152:in `tcp_listener'", "/opt/logstash-2.4.0/vendor/bundle/jruby/1.9/gems/logstash-input-syslog-2.0.5/lib/logstash/inputs/syslog.rb:117:in `server'", "/opt/logstash-2.4.0/vendor/bundle/jruby/1.9/gems/logstash-input-syslog-2.0.5/lib/logstash/inputs/syslog.rb:101:in `run'"], :level=>:warn}
{:timestamp=>"2017-05-12T10:28:02.542000+0800", :message=>"syslog listener died", :protocol=>:udp, :address=>"0.0.0.0:514", :exception=>#<SocketError: bind: name or service not known>, :backtrace=>["org/jruby/ext/socket/RubyUDPSocket.java:160:in `bind'", "/opt/logstash-2.4.0/vendor/bundle/jruby/1.9/gems/logstash-input-syslog-2.0.5/lib/logstash/inputs/syslog.rb:135:in `udp_listener'", "/opt/logstash-2.4.0/vendor/bundle/jruby/1.9/gems/logstash-input-syslog-2.0.5/lib/logstash/inputs/syslog.rb:117:in `server'", "/opt/logstash-2.4.0/vendor/bundle/jruby/1.9/gems/logstash-input-syslog-2.0.5/lib/logstash/inputs/syslog.rb:97:in `run'"], :level=>:warn}

搜到这篇文章终于解决
http://blog.youkuaiyun.com/julykobe/article/details/44002687

使用sudo也不行，必须sudo -i切换到root用户才正常。

http://blog.youkuaiyun.com/julykobe/article/details/44002687