This notice addresses a known issue with the default bundled versions of the dissect filter and dead letter queue input plugins in the Logstash 5.5.0 release.
The Problem
When using the dissect filter or dead letter queue input in a new or existing pipeline configuration with Logstash 5.5.0, users will encounter this fatal error when starting Logstash:
[2017-07-07T11:18:16,031][ERROR][logstash.agent] Cannot create pipeline {:reason=>"Couldn't find any filter plugin named 'dissect'. Are you sure this is correct? Trying to load the dissect filter plugin resulted in this error: Problems loading the requested plugin named dissect of type filter..."}
The cause of this error is due to the exclusion of the dissect filter (v1.0.9) and dead letter queue input (v1.0.4) jar files in the Logstash 5.5.0 package, rendering the default versions of these plugins unusable.
The Solution
- Upgrade to Logstash 5.5.1 which fixes these issues.
If you are on 5.5.0, and can't upgrade immediately, follow these steps:
There is a simple solution to resolve this problem by updating the respective plugins with the Logstash plugin manager:
-
Dissect filter to v1.0.11 or higher (or v1.0.8 and lower, if required)
bin/logstash-plugin update logstash-filter-dissect -
Dead letter queue input to v1.0.5 or higher (or v1.0.3 and lower, if required)
bin/logstash-plugin update logstash-input-dead_letter_queue
With these plugin updates, the dissect filter and dead letter queue input plugins will effectively be usable. This issue will also be resolved in the upcoming Logstash 5.5.1 patch release.