Collectd - Logstash not working

Elastic Stack Logstash
1

Hey,
Apologies if this has come up before, I am new to Elastic Stack. This was working but stopped after about 4 Hrs. I am collecting SNMP data with collectd and sending it to logstash, but its not processing any more. Getting the following error in logstash logs.

`"reason"=>"object mapping for [host] tried to parse field [host] as object, but found a concrete value"}`

elastic and logstash version are. 7.17.3

input {
  udp {
    port => 25826
    buffer_size => 1452
    codec => collectd { }
  }
}
output {
        elasticsearch {
            hosts => ["172.20.215.27:9200"]
            index => "collectd-%{+YYYY.MM.dd}"
        }
}

Thanks for any assistance

2

See this post. Once you have indexed an document in which [host] is an object (probably containing [host][name]) any event that in which [host] is text will be rejected.

3

Hi Badger,
Thanks for the assistance. I think this is indeed the case. When I set this up at the beginning, I sent beats data to logstash on port 5044, however I was seeing the data in Kibana under the collectd-* index.
With the way the collectd.conf file runs it creates a new index by date each day. So the next day when a new index was created, the issue was resolved.
Thanks

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.