Logstash 日志存储配置错误:未知设置';开始位置';对于文件{:level=>;:error}

Logstash 日志存储配置错误:未知设置';开始位置';对于文件{:level=>;:error},logstash,Logstash,我正在学习elk,配置文件有问题:logstash.config以下是配置: input { file { path => "E:/elk/log/access_test.log" start_position => beginning } } filter { grok { match => { "message" =&g

我正在学习elk,配置文件有问题:logstash.config以下是配置:

input {
       file {
             path => "E:/elk/log/access_test.log"
             start_position => beginning
       }
}
filter { 
       grok { 
             match => {
                "message" => "%{COMBINEDAPACHELOG}"
             }
       }
       date {
             locale => "en"
             match => [ "timestamp" , "dd/MMM/YYYY:HH:mm:ss Z", "ISO8601" ]
       }
}
output {
        file {
              path => "E:/elk/log/logstash-access_test.log"
              start_position => beginning
       }
}

当我运行配置时,标题的错误就会出现。有人能告诉我原因吗?

输出文件插件没有
start\u position
属性试试这个

input {
       file {
             path => "E:/elk/log/access_test.log"
             start_position => beginning
       }
}
filter { 
        grok { 
              match => {
                        "message" => "%{COMBINEDAPACHELOG}"
              }
        }
        date {
              locale => "en"
              match => [ "timestamp" , "dd/MMM/YYYY:HH:mm:ss Z", "ISO8601" ]
        }
}
output {
       file {
             path => "E:/elk/log/logstash-access_test.log"
       }
}

另外,如果有帮助,可以使用--configtest调用logstash,它应该为您提供更多信息,特别是行/列号

希望这将确认问题是在输出而不是输入