[Bug 257309] sysutils/beats7: 7.13 compatibility to non-Elastic distributions

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=257309

--- Comment #2 from bgdnlp <freebsd.org@neant.ro> ---
(In reply to Kubilay Kocak from comment #1)

Yes, I can add more details, but I can't yet confirm the workaround works.
Pretty sure it does. Basically we downgraded to beats 7.10.

The error that shows up in logs is this:

ERROR   [publisher_pipeline_output]     pipeline/output.go:154  Failed to
connect to backoff(elasticsearch(https://my.elasticsearch.url:443)): Connection
marked as failed because the onConnect callback failed: could not connect to a
compatible version of Elasticsearch: unauthorized access, could not connect to
the xpack endpoint, verify your credentials

The pull request that broke it is:
https://github.com/elastic/beats/pull/25351/files

This other pull request that would have restored functionality was rejected:
https://github.com/elastic/beats/pull/26305

(I don't know what the code does or if it works as intended)

My workaround is to downgrade to 7.10, which is thankfully still available in
quarterly repo, then lock the package:

sudo service filebeat stop
sudo pkg remove beats7
fetch https://pkg.freebsd.org/FreeBSD:12:amd/quarterly/All/beats7-7.10.1.txz
sudo pkg install -y beats7-7.10.1.txz
sudo pkg lock -y beats7-7.10.1

I guess one way forward would be to provide a 'beats7-oss' package or similar
which would only be upgraded after beats7 is (inevitably) forked to be patched
to work with non-Elastic distributions of ES.

-- 
You are receiving this mail because:
You are the assignee for the bug.