Hello All, I have a configuration described in the subject line and also here. Logs are shipped by filebeat to a logstash which then outputs it to a rabbitmq. All is well with this part, I can intercept messages in rabbitmq. The content however gets lost in the second part, and I have been unabl…

You cannot index both types of messages to the same elasticsearch index. The structures are incompatible. In one [host] is a string "host": "xxx.xxx.xxx.xxx", and in the other it is an object "host": { "name": "ip-xx-xx-xx-xx" }, Whichever one gets indexed first will cause all the messages …

Discuss the Elastic Stack

Filebeat -> logstash -> rabbitmq -> logstash -> elasticsearch

Elastic Stack Logstash

bvoros (Bertalan Voros) September 2, 2019, 4:06pm 10

Thanks a lot, this all makes sense now.

Topic		Replies	Views
[Double] Don’t binding name index on Elasticsearch when using RabbitMQ Beats Logstash	2	998	December 28, 2015
Don't binding name index on Elasticsearch when using RabbitMQ Logstash	6	2198	July 6, 2017
Filebeat cant send data to logstash Beats filebeat	11	4596	February 20, 2018
Communication Problem between logstash and elasticsearch Elasticsearch	3	1321	July 6, 2017
Using beats and send logstash Beats	2	698	December 22, 2016

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Filebeat -> logstash -> rabbitmq -> logstash -> elasticsearch

Related topics