Logstash 不向彈性搜索發送數據

Question

input { 
   file{
path => "C:/elastic_stack/*.csv"
start_position => "beginning"
sincedb_path => "null"
     }
}
filter {
csv { separator => ","
columns => ["name","mfr","type","calories","protein","fat","sodium","fiber","carbo","sugars","potass","vitamins","shelf","weight","cups","rating"]
}
}
output {
elasticsearch
{ hosts => "http://localhost:9200/"
  index => "cereals"
}
stdout {}
}

在 cmd 我看到消息 [2021-03-28T20:27:02,468][INFO][logstash.javapipeline][main] Pipeline started {"pipeline.id"=>"main"} [2021-03-28T20: 27:02,531][INFO ][filewatch.observingtail ][main][f09c0225c6dfc66bb50a8d3706ec14e066921c92842bc5680d0b5bb0aee01580] START, creating Discoverer, Watch with file and sincedb collections [2021-03-28T20:27:02,554][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]} [2021-03-28T20:27:02,985][INFO ][logstash.agent ] 成功啟動 Logstash API 端點 {:port =>9600}

但是數據沒有發送到彈性搜索。 在 kibana 中，我無法創建索引。

Answer 1

它是否將任何內容打印到標准輸出？ 如果不是，則沒有解析 .csv 文件的任何行。

您似乎在 windows 機器上，然后嘗試通過將其值設置為NUL來禁用 sincedb_path （ https://github.com/logstash-plugins/logstash-input-file/issues/26 ）