.xls的ElasticSearch接收管道解析错误

Question

每当我在一个环境中将带有管道=附件的.xls文档发布到Elastic Search时，都会遇到以下异常。 具有完全相同版本的摄取插件6.6.11或更高版本的其他环境能够成功创建/索引文档。

{
  "error" : {
    "root_cause" : [
      {
        "type" : "exception",
        "reason" : "java.lang.IllegalArgumentException: ElasticsearchParseException[Error parsing document in field [data]]; nested: NoSuchFileException[/tmp/elasticsearch.X8YIXwqv/apache-tika-1557338864100513463.tmp];",
        "header" : {
          "processor_type" : "attachment"
        }
      }
    ],
    "type" : "exception",
    "reason" : "java.lang.IllegalArgumentException: ElasticsearchParseException[Error parsing document in field [data]]; nested: NoSuchFileException[/tmp/elasticsearch.X8YIXwqv/apache-tika-1557338864100513463.tmp];",
    "caused_by" : {
      "type" : "illegal_argument_exception",
      "reason" : "ElasticsearchParseException[Error parsing document in field [data]]; nested: NoSuchFileException[/tmp/elasticsearch.X8YIXwqv/apache-tika-1557338864100513463.tmp];",
      "caused_by" : {
        "type" : "parse_exception",
        "reason" : "Error parsing document in field [data]",
        "caused_by" : {
          "type" : "no_such_file_exception",
          "reason" : "/tmp/elasticsearch.X8YIXwqv/apache-tika-1557338864100513463.tmp"
        }
      }
    },
    "header" : {
      "processor_type" : "attachment"
    }
  },
  "status" : 500
}

Answer 1

转到服务器上的/ tmp目录，并创建异常中引用的子目录elasticsearch.xxxxx或重新启动ES节点，然后验证是否已创建子目录。 我相信apache tika 1.17正在尝试创建一个分析.xls文件的临时文件，并且显然由于子目录丢失而失败