Heroku plugin not working with logstash 1.5?


(Dan) #1

Hi folks,

I'm trying to get the heroku community plugin working with logstash 1.5

$ /opt/logstash/bin/logstash --version
logstash 1.5.0

Here's the plugin page: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-heroku.html

This is a stock Amazon Linux AMI, running a t2.micro instance.

$ java -version
java version "1.7.0_79"
OpenJDK Runtime Environment (amzn-2.5.5.1.59.amzn1-x86_64 u79-b14) OpenJDK 64-Bit Server VM (build 24.79-b02, mixed mode)

I installed the toolbelt (the standalone toolbelt): wget -qO- https://toolbelt.heroku.com/install.sh | sh

I installed the plugin via sudo bin/plugin install logstash-input-heroku

The logstash user has access to the heroku toolbelt:

$ sudo su -c '/usr/local/heroku/bin/heroku apps' logstash

=== Collaborated Apps
app-name  appuser@foo.com

updating Heroku CLI...done. Updated to 3.37.5

I have verified that logstash is running fine, because when I use the syslog drain method (outlined here): http://www.joemiller.me/2014/01/31/heroku-logs-drains-and-logstash/ , I get events from the heroku server.

This is the error message I get.

{:timestamp=>"2015-06-02T14:18:38.820000+0000", :message=>"A plugin had an unrecoverable error. Will restart this plugin.\n  Plugin: <LogStash::Inputs::Heroku a
pp=>\"pure-spider-test\", tags=>[\"input_heroku_plugin\"]>\n  Error: uninitialized constant Heroku::Client", :level=>:error}

I get this every second.

When I restart logstash, I see this error:

{:timestamp=>"2015-06-02T14:19:55.208000+0000", :message=>"You are using a depre
cated config setting \"pattern\" set in grok. Deprecated settings will continue
to work, but are scheduled for removal from logstash in the future. You should u
se this instead: match => { \"message\" => \"your pattern here\" } If you have a
ny questions about this, please visit the #logstash channel on freenode irc.", :
name=>"pattern", :plugin=><LogStash::Filters::Grok --->, :level=>:warn}

I know this is a community supported plugin, but would appreciate any help. I did some google searching and looked in this forum, but can't find anything that seems to address my concerns.

Thanks,
Dan


(system) #2