Hi,
I have indexed some data. When I check in Head plugin, nothing present in the name of that index. Don't know what to do..
The following screenshot shows the completions of indexing of logs
This is the configuration file that I have used
input
{
file
{
path => "Q:/sanjay/Splunk/DB/HCG/PatientsDropoutReport_apr14 till Date.psv"
type => "all"
start_position => "beginning"
}
}
filter
{
csv {
columns =>["PatientID","UHID","PATIENTNAME","GENDER","DB","AGE","ADDRESS","CITY","STATE","COUNTRY","MOBILENO","REGDATE","USERNAME","LOCATION","DOCTOR","REFDOCTOR","PatientID1"]
separator => "|"
}
grok
{
patterns_dir => "Q:/softwares/ElasticSearch/logstash-1.3.3-flatjar/patterns"
match => ["REGDATE", "%{YEAR:al_year}/%{MONTHNUM:al_month}/%{MONTHDAY:al_monthday} %{TIME:al_time}" ]
add_field => [ "LogTime", "%{al_year}/%{al_month}/%{al_monthday} %{al_time}" ]
}
date
{
match => [ "LogTime", "YYYY/MM/dd HH:mm"]
}
mutate
{
convert => ["PatientID", "integer"]
convert => ["Age", "integer"]
}
}
output
{
elasticsearch_http
{
host => "localhost"
index => "A_DropOutPatients"
index_type => "A_DropOutPatients"
template => "Q:/softwares/ElasticSearch/logstash-1.3.3-flatjar/elasticsearch-template-A-DropOutPatients.json"
template_name => "A_DropOutPatients"
}
stdout
{
codec => "json"
debug => true
}
}
The following is the Head plugin screenshot
Please help
Regards,
Sanjay Reddy