2020-04-01T15:13:16.939+0800 INFO instance/beat.go:412 filebeat stopped.
2020-04-01T15:13:16.939+0800 ERROR instance/beat.go:933 Exiting: 1 error: setting 'filebeat.prospectors' has been removed
Exiting: 1 error: setting 'filebeat.prospectors' has been removed
查看官网有此问题答案:https://discuss.elastic.co/t/filebeat-prospectors-has-been-removed/205563
What is the version of Filebeat your are using? Prospectors has been renamed to inputs in 6.3. So if you simply change prospectors to inputs, it should work.
在6.3版本以后,在配置文件中需要把filebeat.prospectors 修改为filebeat.inputs