Kosho (https://github.com/kosho/flight-track) did a fantastic application for ELK. However, following the readme I belive there is an error. My Dump1090 running on a Rpi does not have the
dump1090 --net --aggressive --quiet (--quiet) option. The http port 30003 output is in the form below;
MSG,5,,,A6F5D7,,,,,,,12150,,,,,,,,,,
MSG,5,,,A6F5D7,,,,,,,12150,,,,,,,,,,
MSG,5,,,A6F5D7,,,,,,,12200,,,,,,,,,,
MSG,5,,,A6F5D7,,,,,,,12225,,,,,,,,,,
MSG,5,,,A6F5D7,,,,,,,12250,,,,,,,0,0,0,0
MSG,5,,,A6F5D7,,,,,,,12275,,,,,,,,,,
MSG,5,,,A6F5D7,,,,,,,12375,,,,,,,,,,
MSG,8,,,A6F5D7,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,0,0,0,0
MSG,5,,,A6F5D7,,,,,,,12900,,,,,,,,,,
MSG,5,,,A6F5D7,,,,,,,12900,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,0,0,0,0
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,5,,,A0C7CC,,,,,,,34000,,,,,,,,,,
MSG,8,,,A0C7CC,,,,,,,,,,,,,,,,,
The Flight-tracker-logstash.conf looks to be searching for decoded data.
input {
http_poller {
urls => {
dump1090 => "http://192.168.0.17:30003/data.json"
}
request_timeout => 60
interval => 5
codec => "json"
}
}
filter {
if "_jsonparsefailure" in [tags] { drop { } }
if "_http_request_failure" in [tags] { drop { } }
if [flight] {
mutate { strip => ["flight"] }
ruby {
code => 'event.set("[airline]", event.get("[flight]")[0..2])'
}
}
if [flight] == "" {
mutate {
remove_field => ["flight", "airline"]
add_field => {
"flight" => "unknown"
"airline" => "unknown"
}
}
}
mutate {
remove_field => ["message"]
remove_field => ["response_headers", "code", "response_message", "time_retried", "runtime_seconds"]
}
if [lat] and [lon] {
mutate {
add_field => ["location", "%{lat}, %{lon}"]
remove_field => ["lat", "lon"]
}
}
}
output {
stdout { codec => rubydebug { metadata => true } }
if [validtrack] {
elasticsearch {
hosts => "http://localhost:9200"
user => ""
password => ""
index => "flight-track-%{+YYYY-MM-dd}"
template => "/usr/share/logstash/flight-track-template.json"
template_name => "flight-track"
template_overwrite => true
}
}
}
Where does the --quiet option come from?
Ian