Question

我是弹性搜索概念的新手，可以与mySQL建立联系。我遵循了多个教程进行安装，但出现以下错误：弹性搜索的未知设置'“ index”'和'“ host'”

的输出

sudo -Hu root /usr/share/logstash/bin/logstash --path.settings /etc/logstash/

返回：

> Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties 
> [2019-04-20T17:48:47,293][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.0.0"} 
> [2019-04-20T17:48:53,873][ERROR][logstash.outputs.elasticsearch] Unknown setting '"document_type"' for elasticsearch 
> [2019-04-20T17:48:53,878][ERROR][logstash.outputs.elasticsearch] Unknown setting '"hosts"' for elasticsearch > [2019-04-20T17:48:53,878][ERROR][logstash.outputs.elasticsearch] Unknown setting '"index"' for elasticsearch 
> [2019-04-20T17:48:53,891][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Something is wrong with your configuration.", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/config/mixin.rb:86:inconfig_init'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:60:in initialize'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:232:ininitialize'", "org/logstash/config/ir/compiler/OutputDelegatorExt.java:48:in initialize'", "org/logstash/config/ir/compiler/OutputDelegatorExt.java:30:ininitialize'", "org/logstash/plugins/PluginFactoryExt.java:239:in plugin'", "org/logstash/plugins/PluginFactoryExt.java:137:inbuildOutput'", "org/logstash/execution/JavaBasePipelineExt.java:50:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:inblock in converge_state'"]}
> [2019-04-20T17:48:54,190][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
> [2019-04-20T17:48:59,066][INFO ][logstash.runner ] Logstash shut down.

这是logstash.conf文件的内容：

input {
  jdbc {
    jdbc_connection_string => "jdbc:mysql://localhost:3306/archief"
    # The user we wish to execute our statement as
    jdbc_user => "root"
    jdbc_password => "pswxxx"
    # The path to our downloaded jdbc driver
    jdbc_driver_library => "/usr/share/java/mysql-connector-java-8.0.15.jar"
    jdbc_driver_class => "com.mysql.jdbc.Driver"
    # our query
    statement => "SELECT * FROM archief"
    }
  }
output {
  stdout { codec => json_lines }
  elasticsearch {
  "hosts" => ["localhost:9200"]
  "index" => "archief"
  }
}

Answer 1

选项名称中没有双引号。

output {
  stdout { codec => json_lines }
  elasticsearch {
    hosts => ["localhost:9200"]
    index => "archief"
  }
}

Answer 2

我遇到了同样的问题，并通过将Logstash版本从7.4.2更改为6.3.2来解决了该问题。

Logstash 6.3.2 link

logstash：elasticsearch的未知设置““索引””

2 个答案: