Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 14 Jul 2024 00:28:03 +0200
From:      Alex Samorukov <samm@freebsd.org>
To:        Juraj Lutter <otis@FreeBSD.org>
Cc:        "elastic@freebsd.org" <elastic@FreeBSD.org>
Subject:   Re: Beats update
Message-ID:  <170e448e-8e6b-4496-bceb-354450297136@freebsd.org>
In-Reply-To: <DB16D609-ADED-43A7-A8EC-1B0D081D959F@FreeBSD.org>
References:  <69051943-d83f-4663-9a7a-fe6f1d096a26@freebsd.org> <DB16D609-ADED-43A7-A8EC-1B0D081D959F@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------c1v9gdim2OrR1JnBTh8Z18qe
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit


On 13.07.2024 22:03, Juraj Lutter wrote:
> Hi Oleksij,
>
>> On 13 Jul 2024, at 21:57, Alex Samorukov <samm@freebsd.org> wrote:
>>
>> Dear elastic,
>>
>> I found that beats8 port is broken due to go-sysinfo version which 
>> fails on gethost call on startup.
>>
>> I patched port and updated it to the latest version. Patch is 
>> attached. Please update the port.
>
> Thanks. I haven’t look into the patch closely, but: Is it the patch 
> that is the part of PR126 from go-sysinfo?
>
Hi Juraj,

Yes, exactly, it is from PR. This is the reason why i decided to put 
patch as a single file, to easily remove it once PR is merged (hopefully)

I was playing with victoria-logs which i just added to the ports tree, 
and found that many log ingestion tools are broken or missing. E.g.

Vector - was abandoned long time back and removed from the tree. May be 
i will try to re-add it, it works very well on Linux.

Fluentbit - crashing on http collector. I think it is very low quality 
on Linux too, so don't really want to touch it.

Filebeat - that's where i found that it installs but does not work, with 
patch seems to be do the job well

Logstash - java and was very problematic on all platforms

I will see if its easy to get vector back, but i think that having at 
least working beats will be helpful for the users with similar goals.


--------------c1v9gdim2OrR1JnBTh8Z18qe
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 13.07.2024 22:03, Juraj Lutter
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:DB16D609-ADED-43A7-A8EC-1B0D081D959F@FreeBSD.org">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      Hi Oleksij,<br id="lineBreakAtBeginningOfMessage">
      <div><br>
        <blockquote type="cite">
          <div>On 13 Jul 2024, at 21:57, Alex Samorukov
            <a class="moz-txt-link-rfc2396E" href="mailto:samm@freebsd.org">&lt;samm@freebsd.org&gt;</a> wrote:</div>
          <br class="Apple-interchange-newline">
          <div>
            <div>Dear elastic,<br>
              <br>
              I found that beats8 port is broken due to go-sysinfo
              version which fails on gethost call on startup.<br>
              <br>
              I patched port and updated it to the latest version. Patch
              is attached. Please update the port.<br>
            </div>
          </div>
        </blockquote>
        <div><br>
        </div>
        <div>Thanks. I haven’t look into the patch closely, but: Is it
          the patch that is the part of PR126 from go-sysinfo?</div>
        <div><br>
        </div>
      </div>
    </blockquote>
    <p>Hi Juraj,</p>
    <p>Yes, exactly, it is from PR. This is the reason why i decided to
      put patch as a single file, to easily remove it once PR is merged
      (hopefully)<br>
    </p>
    <p>I was playing with victoria-logs which i just added to the ports
      tree, and found that many log ingestion tools are broken or
      missing. E.g.</p>
    <p>Vector - was abandoned long time back and removed from the tree.
      May be i will try to re-add it, it works very well on Linux.</p>
    <p>Fluentbit - crashing on http collector. I think it is very low
      quality on Linux too, so don't really want to touch it. <br>
    </p>
    <p>Filebeat - that's where i found that it installs but does not
      work, with patch seems to be do the job well</p>
    <p>Logstash - java and was very problematic on all platforms</p>
    <p>I will see if its easy to get vector back, but i think that
      having at least working beats will be helpful for the users with
      similar goals.<br>
    </p>
    <p><br>
    </p>
  </body>
</html>

--------------c1v9gdim2OrR1JnBTh8Z18qe--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?170e448e-8e6b-4496-bceb-354450297136>