[Bug 257309] sysutils/beats7: 7.13 compatibility to non-Elastic distributions

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 21 Jul 2021 11:14:57 +0000

--- Comment #2 from bgdnlp <freebsd.org_at_neant.ro> ---
(In reply to Kubilay Kocak from comment #1)

Yes, I can add more details, but I can't yet confirm the workaround works.
Pretty sure it does. Basically we downgraded to beats 7.10.

The error that shows up in logs is this:

ERROR   [publisher_pipeline_output]     pipeline/output.go:154  Failed to
connect to backoff(elasticsearch(https://my.elasticsearch.url:443)): Connection
marked as failed because the onConnect callback failed: could not connect to a
compatible version of Elasticsearch: unauthorized access, could not connect to
the xpack endpoint, verify your credentials

The pull request that broke it is:

This other pull request that would have restored functionality was rejected:

(I don't know what the code does or if it works as intended)

My workaround is to downgrade to 7.10, which is thankfully still available in
quarterly repo, then lock the package:

sudo service filebeat stop
sudo pkg remove beats7
fetch https://pkg.freebsd.org/FreeBSD:12:amd/quarterly/All/beats7-7.10.1.txz
sudo pkg install -y beats7-7.10.1.txz
sudo pkg lock -y beats7-7.10.1

I guess one way forward would be to provide a 'beats7-oss' package or similar
which would only be upgraded after beats7 is (inevitably) forked to be patched
to work with non-Elastic distributions of ES.

You are receiving this mail because:
You are the assignee for the bug.
Received on Wed Jul 21 2021 - 11:14:57 UTC

Original text of this message