hey there,
hope you can help me
I started my ELK setup with docker-compose a few days ago. It looked fine as all 3 containers where running without any data. Today i wanted to import some xml files with logstash and xpath, but it already errors when he wants an absolute path. My path "C:/Users/username/Desktop/DockerComposeFile/data/data_1.xml" is absolute indeed (i replaced my username with username ). I first tried with *.xml at the end, and the same error occured. Then i tried this version, but also the same error. I also tried with normal slashes, but didn't work eather. I am working on a Windows machine, just for notice. The full Error is:
Pipeline error {:pipeline_id=>"main", :exception=>#<ArgumentError: File paths must be absolute, relative path specified: C:/Users/username/Desktop/DockerComposeFile/data/data_1.xml>, :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.2.2/lib/logstash/inputs/file.rb:283:in `block in register'", "org/jruby/RubyArray.java:1809:in each'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.2.2/lib/logstash/inputs/file.rb:281:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:228:in `block in register_plugins'", "org/jruby/RubyArray.java:1809:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:227:in `register_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:386:in `start_inputs'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:311:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:185:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:137:in `block in start'"], "pipeline.sources"=>["/usr/share/logstash/pipeline/logstash.conf"], :thread=>"#<Thread:0x55796994@/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:54 run>"}
EDIT:
my .config is:
input {
file{
path => "C:\Users\username\Desktop\DockerComposeFile\data\data_1.xml"
type => "xml"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
xml {
source => "message"
store_xml => false
xpath => [
"//GetRecordByIdResponse/MD_Metadata/@fileIdentifier", "identifier",
"//GetRecordByIdResponse/MD_Metadata/@dateStamp", "date",
"//GetRecordByIdResponse/MD_Metadata/identificationInfo/SV_ServiceIdentification/citation/CI_Citation/@title", "title"
]
}
}
output {
elasticsearch {
hosts => "elasticsearch:9200"
index => "searchData"
}
}
Hope you can help me.
Cheers