Indexing 尝试从logstash在弹性搜索中创建索引时出错
嗨,我在尝试从logstash创建ElasticSearch索引时遇到以下错误: [Converge PipelineAction::Create]代理-无法执行操作 {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>“LogStash::ConfigurationError”,:message=>“应为#、输入、筛选、输出中的一个” 第1行第1列(字节1)” 你能告诉我我的.conf文件中是否有错误吗Indexing 尝试从logstash在弹性搜索中创建索引时出错,indexing,logstash,Indexing,Logstash,嗨,我在尝试从logstash创建ElasticSearch索引时遇到以下错误: [Converge PipelineAction::Create]代理-无法执行操作 {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>“LogStash::ConfigurationError”,:message=>“应为#、输入、筛选、输出中的一个” 第1行第1列(字节1)” 你能告诉我我的.conf文件中是否有错误
iput {
file {
path => "/opt/sis-host/process/uptime_test*"
# start_position => "beginning"
ignore_older => 0
}
}*emphasized text*
filter {
grok {
match => { "message" => "%{DATA:hora} %{DATA:fecha} %{DATA:status} %{DATA:server} %
{INT:segundos}" }
}
date {
match => ["horayfecha", "HH:mm:ss MM/dd/YYYY" ]
target => "@timestamp"
}
}
output {
elasticsearch {
hosts => ["host:9200"]
index => "uptime_test-%{+YYYY.MM.dd}"
}
stdout { codec => rubydebug }
}
配置文件应以输入而不是“iput”开头
input { # not iput
file {
path => "/opt/sis-host/process/uptime_test*"
# start_position => "beginning"
ignore_older => 0
}
}
filter {
grok {
match => { "message" => "%{DATA:hora} %{DATA:fecha} %{DATA:status} %{DATA:server} %
{INT:segundos}" }
}
date {
match => ["horayfecha", "HH:mm:ss MM/dd/YYYY" ]
target => "@timestamp"
}
}
output {
elasticsearch {
hosts => ["host:9200"]
index => "uptime_test-%{+YYYY.MM.dd}"
}
stdout { codec => rubydebug }
}