Hi folks,
I'm trying to get the heroku community plugin working with logstash 1.5
$ /opt/logstash/bin/logstash --version
logstash 1.5.0
Here's the plugin page: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-heroku.html
This is a stock Amazon Linux AMI, running a t2.micro instance.
$ java -version
java version "1.7.0_79"
OpenJDK Runtime Environment (amzn-2.5.5.1.59.amzn1-x86_64 u79-b14) OpenJDK 64-Bit Server VM (build 24.79-b02, mixed mode)
I installed the toolbelt (the standalone toolbelt): wget -qO- https://toolbelt.heroku.com/install.sh | sh
I installed the plugin via sudo bin/plugin install logstash-input-heroku
The logstash user has access to the heroku toolbelt:
$ sudo su -c '/usr/local/heroku/bin/heroku apps' logstash
=== Collaborated Apps
app-name appuser@foo.com
updating Heroku CLI...done. Updated to 3.37.5
I have verified that logstash is running fine, because when I use the syslog drain method (outlined here): http://www.joemiller.me/2014/01/31/heroku-logs-drains-and-logstash/ , I get events from the heroku server.
This is the error message I get.
{:timestamp=>"2015-06-02T14:18:38.820000+0000", :message=>"A plugin had an unrecoverable error. Will restart this plugin.\n Plugin: <LogStash::Inputs::Heroku a
pp=>\"pure-spider-test\", tags=>[\"input_heroku_plugin\"]>\n Error: uninitialized constant Heroku::Client", :level=>:error}
I get this every second.
When I restart logstash, I see this error:
{:timestamp=>"2015-06-02T14:19:55.208000+0000", :message=>"You are using a depre
cated config setting \"pattern\" set in grok. Deprecated settings will continue
to work, but are scheduled for removal from logstash in the future. You should u
se this instead: match => { \"message\" => \"your pattern here\" } If you have a
ny questions about this, please visit the #logstash channel on freenode irc.", :
name=>"pattern", :plugin=><LogStash::Filters::Grok --->, :level=>:warn}
I know this is a community supported plugin, but would appreciate any help. I did some google searching and looked in this forum, but can't find anything that seems to address my concerns.
Thanks,
Dan