[Attention] Logstash 5.5.0 - Known Issue with Dissect Filter and Dead Letter Queue Input


(Alvin Chen) #1

This notice addresses a known issue with the default bundled versions of the dissect filter and dead letter queue input plugins in the Logstash 5.5.0 release.

The Problem

When using the dissect filter or dead letter queue input in a new or existing pipeline configuration with Logstash 5.5.0, users will encounter this fatal error when starting Logstash:

[2017-07-07T11:18:16,031][ERROR][logstash.agent] Cannot create pipeline {:reason=>"Couldn't find any filter plugin named 'dissect'. Are you sure this is correct? Trying to load the dissect filter plugin resulted in this error: Problems loading the requested plugin named dissect of type filter..."}

The cause of this error is due to the exclusion of the dissect filter (v1.0.9) and dead letter queue input (v1.0.4) jar files in the Logstash 5.5.0 package, rendering the default versions of these plugins unusable.

The Solution

  • Upgrade to Logstash 5.5.1 which fixes these issues.

If you are on 5.5.0, and can't upgrade immediately, follow these steps:

There is a simple solution to resolve this problem by updating the respective plugins with the Logstash plugin manager:

  • Dissect filter to v1.0.11 or higher (or v1.0.8 and lower, if required)
    bin/logstash-plugin update logstash-filter-dissect

  • Dead letter queue input to v1.0.5 or higher (or v1.0.3 and lower, if required)
    bin/logstash-plugin update logstash-input-dead_letter_queue

With these plugin updates, the dissect filter and dead letter queue input plugins will effectively be usable. This issue will also be resolved in the upcoming Logstash 5.5.1 patch release.


NameError with DLQ input plugin
(Alvin Chen) #2

(Suyog Rao) #3

Logstash 5.5.1 has been released with fixes for dead letter queue input and dissect filter.


(Alvin Chen) #4

(Alvin Chen) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.