Conflict with _id

Hi,
here is the item of my json file.

//{"jurHash":"112256955","txnId":"vipus0E48BEC71E28C81F","ts":"2018-01-29 00:03:30.085 +0000","result.statusMessage":"Success","durationMillis":2,"requestId":"9999","extUserId":"testto demo","result.status":"0000","wsdlVersion":"1_8","operation":"createUser","_id":"car4be-w2-tc.1517184210085.15247464"}

The last attribute is "_id", I just met one problem that if I kept this format and imported it to logstash, the logstash would be stuck in "pipelines running" and not import the file successfully. But when I removed the last item or change "_id" into other name, the logstash will work fine.

Please post the config you are using.

input {
file {
path => "/Users/apple/Desktop/SampleData/event.log"
start_position => "beginning"
sincedb_path => "/dev/null"
codec => json
}
}
filter {
json{
source => "message"
remove_field => ["message"]
}
}
output {
elasticsearch {
hosts => "localhost:9200"
index => "realmockdata"
document_type => "eventdata"
}
stdout {}
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.