雪地API和Logstash 7.2.0

我试图在Logstash 7.2.0中查询具有以下配置的snow API

   input {
  http_poller {
    urls => {
    snowinc => {
    url => "https://l.service-now.com/api/now/table/incident?sysparm_limit=10"
    user => "logstash_user"
    password => "hello123"
    headers => {Accept => "application/json"}
    }
}
request_timeout => 60
metadata_target => "http_poller_metadata"
schedule => { cron => "* * * * * UTC"}
codec => "json"
}
}
output {
  elasticsearch {
    hosts => ["10.116.55.24:9200"]
    index => "snowinc"
}
        stdout { codec => rubydebug }
}

但是，我在索引中没有看到任何数据。（创建索引时没有数据） 当我尝试卷曲url时，我能够看到url中的数据。因此，我确信API URL中有数据

日志显示以下错误：

[2019-12-24T01:28:01,510][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"snowinc", :_type=>"_doc", :routing=>nil}, #LogStash::Event:0x13fbd67c], :response=>{"index"=>{"_index"=>"snowinc", "_type"=>"_doc", "id"=>"OkiXNm8Be2NFZrotRzc", "status"=>400, "error"=>{"type"=>"illegal_argument_exception", "reason"=>"mapper [result.assigned_to] of different type, current_type [text], merged_type [ObjectMapper]"}}}}

请帮我找出哪里出了问题

---

提前感谢

请尝试使用下面的筛选器http插件

filter {
http {
    url => "https://service-now.com/api/now/table/incident"
    verb => "GET"
    user => "logstash_user"
    password => "user222"
    query => {
          "sysparm_limit" => 10
        }
        target_body => "[snowData]"
    headers => {
    "Content-Type" => "application/json"
    Accept => "application/json"
    }
    }
}

---

尝试使用如下所示的筛选器http插件

filter {
http {
    url => "https://service-now.com/api/now/table/incident"
    verb => "GET"
    user => "logstash_user"
    password => "user222"
    query => {
          "sysparm_limit" => 10
        }
        target_body => "[snowData]"
    headers => {
    "Content-Type" => "application/json"
    Accept => "application/json"
    }
    }
}

---

问题在于URL数据本身，它有几个列的引用链接，不允许正确转换

用一个

sysparm\u exclude\u reference\u link=true

更改了URL，它工作起来就像一个奇迹

---

感谢所有的帮助。

问题在于URL数据本身，它有一个参考链接，用于一些不允许正确转换的列

用一个

sysparm\u exclude\u reference\u link=true

更改了URL，它工作起来就像一个奇迹

---

谢谢您的帮助。

但我的错误似乎是由于分配给的类型不匹配造成的。上面这些会有什么不同吗？但我的错误似乎是由于分配给的类型不匹配。上述情况会有所不同吗？