logstash-plugins/logstash-input-elasticsearch

Fail to test the plugin,plugin restart again and again.

Closed this issue · 0 comments

Please post all product and debugging questions on our forum. Your questions will reach our wider community members there, and if we confirm that there is a bug, then we can open a new issue here.

For all general issues, please provide the following details for fast resolution:

  • Version:5.4.0
  • Operating System:rhel6.5_64
  • Config File (if you have sensitive info, please remove it):
    input {
    elasticsearch {
    hosts => "192.168.144.65"
    index => "soatest"
    query => '{"query": {"match": {"flowno": 1}}}'
    docinfo => false
    enable_metric => false
    }
    }
    output {
    stdout { codec => rubydebug }
    }
  • Sample Data:{"flowno":"1","name":"qcc"}
  • Steps to Reproduce:
    I just use the basic function.but logstash repeat again and again:

[2017-10-26T14:27:27,679][ERROR][logstash.pipeline ] A plugin had an unrecoverable error. Will restart this plugin.
Plugin: <LogStash::Inputs::Elasticsearch hosts=>["192.168.144.65"], index=>"soatest", query=>"{"query": {"match": {"flowno": 1}}}", docinfo=>false, enable_metric=>false, id=>"48ac806bfab03e422319b3e4bbbfe7de704b74e3-1", codec=><LogStash::Codecs::JSON id=>"json_ace8aefe-1f24-4733-a557-aaeb32005eea", enable_metric=>true, charset=>"UTF-8">, size=>1000, scroll=>"1m", docinfo_target=>"@metadata", docinfo_fields=>["_index", "_type", "_id"], ssl=>false>
Error: [400] {"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"Failed to parse request body"}],"type":"illegal_argument_exception","reason":"Failed to parse request body","caused_by":{"type":"json_parse_exception","reason":"Unrecognized token 'DnF1ZXJ5VGhlbkZldGNoBQAAAAAAAASOFklGT3M2S3U1U0pXMlA1S21ST1RTTlEAAAAAAAAEhhZVcjVncWhhMVNpNm5ITnRwaG9HLWRRAAAAAAAABIcWVXI1Z3FoYTFTaTZuSE50cGhvRy1kUQAAAAAAAASNFklGT3M2S3U1U0pXMlA1S21ST1RTTlEAAAAAAAAEjxZJRk9zNkt1NVNKVzJQNUttUk9UU05R': was expecting ('true', 'false' or 'null')\n at [Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@4e3f57c0; line: 1, column: 457]"}},"status":400}
{
"@timestamp" => 2017-10-26T06:27:27.669Z,
"name" => "qcc",
"@Version" => "1",
"flowno" => "1"
}
[2017-10-26T14:27:28,933][ERROR][logstash.pipeline ] A plugin had an unrecoverable error. Will restart this plugin.
Plugin: <LogStash::Inputs::Elasticsearch hosts=>["192.168.144.65"], index=>"soatest", query=>"{"query": {"match": {"flowno": 1}}}", docinfo=>false, enable_metric=>false, id=>"48ac806bfab03e422319b3e4bbbfe7de704b74e3-1", codec=><LogStash::Codecs::JSON id=>"json_ace8aefe-1f24-4733-a557-aaeb32005eea", enable_metric=>true, charset=>"UTF-8">, size=>1000, scroll=>"1m", docinfo_target=>"@metadata", docinfo_fields=>["_index", "_type", "_id"], ssl=>false>
Error: [400] {"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"Failed to parse request body"}],"type":"illegal_argument_exception","reason":"Failed to parse request body","caused_by":{"type":"json_parse_exception","reason":"Unrecognized token 'DnF1ZXJ5VGhlbkZldGNoBQAAAAAAAASIFlVyNWdxaGExU2k2bkhOdHBob0ctZFEAAAAAAAAEkRZJRk9zNkt1NVNKVzJQNUttUk9UU05RAAAAAAAABJAWSUZPczZLdTVTSlcyUDVLbVJPVFNOUQAAAAAAAASJFlVyNWdxaGExU2k2bkhOdHBob0ctZFEAAAAAAAAEihZVcjVncWhhMVNpNm5ITnRwaG9HLWRR': was expecting ('true', 'false' or 'null')\n at [Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@7392d1bc; line: 1, column: 457]"}},"status":400}
{
"@timestamp" => 2017-10-26T06:27:28.924Z,
"name" => "qcc",
"@Version" => "1",
"flowno" => "1"
}
^C[2017-10-26T14:27:29,699][WARN ][logstash.runner ] SIGINT received. Shutting down the agent.
[2017-10-26T14:27:29,711][WARN ][logstash.agent ] stopping pipeline {:id=>"main"}
{
"@timestamp" => 2017-10-26T06:27:30.018Z,
"name" => "qcc",
"@Version" => "1",
"flowno" => "1"
}