Cannot see data in elasticsearch

2018-12-25 02:15:19,705 INFO - l.s.a.c.a.AdminController [2-thread-1] - entity version in hash map = 319 , entity version in couchbase = 319 skip updating entity since it's up-to-date: __premiumFashionUtil__nav_bar
2018-12-25 02:15:19,727 INFO - l.s.a.c.a.AdminController [2-thread-1] - entity version in hash map = 499 , entity version in couchbase = 499 skip updating entity since it's up-to-date: __premiumFashionUtil__greybar_browse_toggle
2018-12-25 02:15:19,745 INFO - l.s.a.c.a.AdminController [2-thread-1] - pollCacheForewwa, invalid object, skip __staticSwitchUtil__switches
2018-12-25 02:15:19,763 INFO - l.s.a.c.a.AdminController [2-thread-1] - entity version in hash map = 230 , entity version in couchbase = 230 skip updating entity since it's up-to-date: __serverConfig__dsalrcache_version
2018-12-25 02:15:19,806 INFO - l.s.a.c.a.AdminController [2-thread-1] - entity version in hash map = 2010 , entity version in couchbase = 2010 skip updating entity since it's up-to-date: __itemBlacklist__item_blacklist
2018-12-25 02:15:19,824 INFO - l.s.a.c.a.AdminController [2-thread-1] - pollCacheForewwa, invalid object, skip

This is how my logs looks like.
I use the below config

if "admin.log" in [source] {
mutate {
replace => { "input_type" => "lte_admin.log" }
}
grok {
patterns_dir => ["./patterns"]
match => { "message" => "%{YEAR:year}-%{MONTHNUM2:month}-%{MONTHDAY:date}%{SPACE}%{HAPROXYTIME:timestamp}%{SPACE}%{LOGLEVEL:log_type}%{SPACE}-%{JAVALOGMESSAGE:log_message}" }
}
date {
locale => "en"
timezone => "UTC"
match => [ "start_time" , "yyyy-MM-dd HH:mm:ss,SSS", "ISO8601" ]
target => "@timestamp"
}
}
fingerprint {
concatenate_sources => true
source => ["@timestamp", "host"]
target => "[@metadata][fingerprint]"
method => "MURMUR3"
}
}

output {
if [input_type] == "lte_admin.log" {
elasticsearch {
hosts => [{{ elasticsearch_url }}]
timeout => 600
sniffing => false
index => "us-pris-lte-admin-%{+YYYY.MM.dd}"
document_id => "%{[@metadata][fingerprint]}"
}
}
}

Could someone help me out why I dont see data in Elasticsearch

Hello,

Please add this in the output section to check the error in console,

stdout { codec => rubydebug }

Regards

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.