Elasticsearch filter plugin


(Pratheek ) #1

I tried using query in elasticsearch filter plugin to retrieve events from an existing index.But its throwing up some warning.

My conf for filter is as follows:
elasticsearch {
hosts => ["localhost:9200"]
index => "sample_index"
query => "KeyId:%{[FEED]}"
fields => { "REC_TIME" => "RT" }
}

The error I have been facing is

[2017-08-10T16:12:12,026][WARN ][logstash.filters.elasticsearch] Failed to query elasticsearch for previous event {:index=>"sample_index", :query=>"KeyId:prod07", :event=>2017-06-30T05:00:00.000Z,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, , :error=>#<Elasticsearch::Transport::Transport::Errors::MovedPermanently: [301]

Redirection

Redirect

>}

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.