Hi Magnus,
You're right, I actually made a typo and my index is "test" (all lowercase).
With this method, my stdout outputs nothing. And nothing is imported into ES.
I have tried with following filter block :
filter {
csv {
columns => ["name", "adress", "latitude", "longitude"]
separator => ","
}
mutate {
convert => {"latitude" => "float"}
convert => {"longitude" => "float"}
rename => {
"longitude" => "[location][lon]"
"latitude" => "[location][lat]"
}
}
}
stdout outputs the following
{
"message" => "name,adres,50.696324,4.0367",
"@version" => "1",
"@timestamp" => "2016-09-20T06:55:59.646Z",
"host" => "ubuntu",
"name" => "JohnSmith",
"adress" => "Unknown",
"location" => {
"lon" => "4.0367",
"lat" => "50.696324"
}
}
but with the following error
"error"=>{"type"=>"illegal_argument_exception", "reason"=>"[location] is defined as an object in mapping [logs] but this name is already used for a field in other types"}}}, :level=>:warn}
Yet again, no imports in ES.
Thanks