I dunno what I'm doing wrong.
I found this old topic: Elasticsearch input plugin not working over ssl
My elastic cluster is configured to require SSL.
Yes, my cluster listens on port 9200.
I have this config:
input {
Read all documents from Elasticsearch matching the given query
elasticsearch {
hosts => ['elastic1.example.comt:9200']
user => "xxxxx"
password => "yyyyy"
ssl => true
index => "access-log-lines-2017.04.12"
size => 3
query => '{ "query": { "match": { "resp-code": 200 } } }'
}
}
filter {}
output {
stdout {}
}
I get this output:
bin/logstash -w 1 -f /home/anelson/reader.conf
Sending Logstash's logs to /home/anelson/Downloads/logstash-5.1.2/logs which is now configured via log4j2.properties
[2017-04-12T18:22:08,246][INFO ][logstash.pipeline ] Starting pipeline {"id"=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>125}
[2017-04-12T18:22:08,253][INFO ][logstash.pipeline ] Pipeline main started
[2017-04-12T18:22:08,289][ERROR][logstash.pipeline ] A plugin had an unrecoverable error. Will restart this plugin.
Plugin: <LogStash::Inputs::Elasticsearch hosts=>["elastic1.example.com:9200"], user=>"readonly", password=>, ssl=>true, index=>"access-log-lines-2017.04.12", size=>3, query=>"{ "query": { "match": { "resp-code": 200 } } }", id=>"9b8b113521b0bbd41ada639d036b6fe9a2865d1a-1", enable_metric=>true, codec=><LogStash::Codecs::JSON id=>"json_a5ce29fb-5aca-4f00-b8c4-e7b6267cbbad", enable_metric=>true, charset=>"UTF-8">, scroll=>"1m", docinfo=>false, docinfo_target=>"@metadata", docinfo_fields=>["_index", "_type", "_id"]>
Error: initialize: name or service not known