Errors in new filbeat version

Products

• DX Operational Intelligence

Issue/Introduction

The following errors are showing up in the latest filebeat agent. There are 17 inputs configured in the filebeat.yml and none of the have an ID. Is it possible to add an ID for each one to the config so that these errors do not appear. The second error is saying that metrics collection has been disabled so it looks like it will only work for the first input

ERROR  [resource.labels.containerName: doi-filebeat] filestream input ID without ID might lead to data duplication, please add an ID and restart Filebeat
ERROR  [resource.labels.containerName: doi-filebeat] filestream input with ID '' already exists, this will lead to data duplication, please use a different ID. Metrics collection has been disabled on this input.

 

Running Filebeat 24.4.1.2

Resolution

Fixed in a future release

Additional Information

Normally, this is a configuration issue. 

The error message you're seeing is because on your configuration file there are more than one filestream input without an ID set. To fix that just set a unique ID for each filestream input on your configuration file (filebeat.json)