# ES 1.0 RC1 - 10min tutorial "indexer.conf" broken **URL:** \ **Category:** Elasticsearch\ **Created:** [January 30, 2014, 10:26pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513 "2014-01-30T22:26:42Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Tony\_Su](https://avatars.discourse-cdn.com/v4/letter/t/8dc957/32.png) [@Tony\_Su](https://discuss.elastic.co/u/Tony_Su)\ **Post date:** [January 30, 2014, 10:26pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/1 "2014-01-30T22:26:42Z")
Not sure why. the indexer.conf from the 10min tutorial at the following URL looks very simple and generic [http://logstash.net/docs/1.3.3/tutorials/10-minute-walkthrough/](http://logstash.net/docs/1.3.3/tutorials/10-minute-walkthrough/) Setup apache.log \> logstash shipper(parse apache) \> redis \> logstash (indexer.config) \> ES 1.0 RC1 logstash 1.3..3 redis 2.8.4 Data is consumed and passed successfully to redis, then no further. Redis and ES recognize clients like usual. I have deployed using ES .0.90.10 and everything works as expected using exactly the same config files. Is there a known fix? The indexer.conf is so simple I guess maybe the grok pattern is not supported? Tony -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/3d3268f4-c971-40c4-b929-70d00f3c0b2c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/3d3268f4-c971-40c4-b929-70d00f3c0b2c%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Binh\_Ly](https://avatars.discourse-cdn.com/v4/letter/b/ce7236/32.png) [@Binh\_Ly](https://discuss.elastic.co/u/Binh_Ly)\ **Post date:** [January 30, 2014, 10:41pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/2 "2014-01-30T22:41:13Z")
Tony, You should be able to get this to work as-is directly to ES 0.90.10. If you want to use another version of ES like 1.0 RC1, for now you need to change the elasticsearch output to elasticsearch\_http: #elasticsearch { # host =\> "localhost" # port =\> 9300 #} elasticsearch\_http { host =\> "localhost" } -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/e57881c3-9696-43e0-b73d-a325d00d1f74%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/e57881c3-9696-43e0-b73d-a325d00d1f74%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Tony\_Su](https://avatars.discourse-cdn.com/v4/letter/t/8dc957/32.png) [@Tony\_Su](https://discuss.elastic.co/u/Tony_Su)\ **Post date:** [January 31, 2014, 4:47pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/3 "2014-01-31T16:47:55Z")
Thx, I'll give that a try. Since your fix merely specifies the http transport, does this mean that elasticsearch intends to support protocols other than http? Thx, Tony On Thursday, January 30, 2014 2:26:42 PM UTC-8, Tony Su wrote: > Not sure why. the indexer.conf from the 10min tutorial at the following > URL looks very simple and generic > [Getting Started with Logstash | Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.3.3/tutorials/10-minute-walkthrough/) > > Setup > apache.log \> logstash shipper(parse apache) \> redis \> logstash > (indexer.config) \> ES 1.0 RC1 > > logstash 1.3..3 > redis 2.8.4 > > Data is consumed and passed successfully to redis, then no further. > Redis and ES recognize clients like usual. > > I have deployed using ES .0.90.10 and everything works as expected using > exactly the same config files. > > Is there a known fix? The indexer.conf is so simple I guess maybe the grok > pattern is not supported? > > Tony -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/89e8c31c-e915-4eea-ad1f-0fbbac6c0045%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/89e8c31c-e915-4eea-ad1f-0fbbac6c0045%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Binh\_Ly](https://avatars.discourse-cdn.com/v4/letter/b/ce7236/32.png) [@Binh\_Ly](https://discuss.elastic.co/u/Binh_Ly)\ **Post date:** [January 31, 2014, 4:58pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/4 "2014-01-31T16:58:00Z")
Tony, I believe Thrift and Memcached are also available in ES. But not sure if/how that would work with LS though. [http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-thrift.html](http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-thrift.html) [http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-memcached.html](http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-memcached.html) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/8afa5de0-d6d9-45b0-9725-20e13aaefa35%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/8afa5de0-d6d9-45b0-9725-20e13aaefa35%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Tony\_Su](https://avatars.discourse-cdn.com/v4/letter/t/8dc957/32.png) [@Tony\_Su](https://discuss.elastic.co/u/Tony_Su)\ **Post date:** [January 31, 2014, 5:22pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/5 "2014-01-31T17:22:09Z")
Unfortunately, adding/specifying http in the Logstash Indexer.conf still does not work communicating to ES 1.0 RC1. Output follows, first the stdout error reported by Logstash followed by indexer.conf contents tony@Marvel-openSUSE:~/Working\> java -jar logstash-1.3.3-flatjar.jar agent -f indexer.conf Error: Expected one of #, { at line 17, column 17 (byte 355) after output { stdout { debug =\> true debug\_format =\> "json"} elasticsearch tony@Marvel-openSUSE:~/Working\> cat indexer.conf input { redis { host =\> "127.0.0.1" # these settings should match the output of the agent data\_type =\> "list" key =\> "logstash" # We use the 'json' codec here because we expect to read # json events from redis. codec =\> json } } output { stdout { debug =\> true debug\_format =\> "json"} elasticsearch http{ host =\> "127.0.0.1" } } On Thursday, January 30, 2014 2:41:13 PM UTC-8, Binh Ly wrote: > Tony, > > You should be able to get this to work as-is directly to ES 0.90.10. If > you want to use another version of ES like 1.0 RC1, for now you need to > change the elasticsearch output to elasticsearch\_http: > > #elasticsearch { > > # host =\> "localhost" > > # port =\> 9300 > > #} > elasticsearch\_http { > host =\> "localhost" > } -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/20eddcbe-8d8f-4fac-bdd6-033ea2ea7451%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/20eddcbe-8d8f-4fac-bdd6-033ea2ea7451%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Binh\_Ly](https://avatars.discourse-cdn.com/v4/letter/b/ce7236/32.png) [@Binh\_Ly](https://discuss.elastic.co/u/Binh_Ly)\ **Post date:** [January 31, 2014, 5:36pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/6 "2014-01-31T17:36:31Z")
Tony, can you please confirm, the output should be "elasticsearch\_http", with underscore in between. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/0e4cee8e-88cd-46fd-b6bd-9d9208c312f7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/0e4cee8e-88cd-46fd-b6bd-9d9208c312f7%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Tony\_Su](https://avatars.discourse-cdn.com/v4/letter/t/8dc957/32.png) [@Tony\_Su](https://discuss.elastic.co/u/Tony_Su)\ **Post date:** [January 31, 2014, 6:38pm UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/7 "2014-01-31T18:38:56Z")
Yup. I can't believe I didn't read that right. Is working now. Thx, Tony On Friday, January 31, 2014 9:36:31 AM UTC-8, Binh Ly wrote: > Tony, can you please confirm, the output should be "elasticsearch\_http", > with underscore in between. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/a886f40a-8668-410a-8331-7cd538017fd9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/a886f40a-8668-410a-8331-7cd538017fd9%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:53am UTC](https://discuss.elastic.co/t/es-1-0-rc1-10min-tutorial-indexer-conf-broken/15513/8 "2017-07-06T01:53:35Z")