From 18d443579d847d81f524f2ebcca88fea0f5bc19c Mon Sep 17 00:00:00 2001 From: Brandyn / Techy Date: Tue, 3 Nov 2026 16:26:21 -0600 Subject: [PATCH] vector: the ingestion endpoint is under /logs too VictoriaLogs' -http.pathPrefix applies to every endpoint, not just the UI, so the elasticsearch bulk path is /logs/insert/elasticsearch/. It rejected the writes with exactly that message. The other three references (vmalert datasource, the metrics scrape, the deadman health probe) were already prefixed correctly. Co-Authored-By: Claude Opus 5 (1M context) --- observability/vector.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/observability/vector.yaml b/observability/vector.yaml index 9667e6f..6f54104 100644 --- a/observability/vector.yaml +++ b/observability/vector.yaml @@ -89,7 +89,8 @@ sinks: victorialogs: type: elasticsearch inputs: [parsed] - endpoints: ["http://victorialogs:9428/insert/elasticsearch/"] + # -http.pathPrefix=/logs applies to EVERY endpoint, ingestion included, so the bulk path lives under it + endpoints: ["http://victorialogs:9428/logs/insert/elasticsearch/"] mode: bulk api_version: v8 compression: gzip