How can i use aggregation in logstash-elasticsearch filter plugin


(yaser no) #1
if[type] == "mytype"    {       elasticsearch       {
                    hosts => ["192.168.1.1:9200"]
                    index => "my_index"
                    query_template => "/logstash/my_query.json"
                     aggregation_fields => 
                     {
                     "seqnumber" => "find_seqnumber"
                     }
              }
        }

why return this error for me ?? ::

Unknown setting 'aggregation_fields' for elasticsearch

in logstash log


(Guy Boertje) #2

This is weird. What version of LS? What version of the elasticsearch filter?

bin/logstash-plugin list --verbose --group filter


(yaser no) #3

both are 6.1


(Guy Boertje) #4

This is the kind of output the bin/logstash-plugin list command prints logstash-filter-elasticsearch (3.3.0)

aggregation_fields was only added recently in v3.3.0. You should be able to upgrade to that version.
See this list. https://www.elastic.co/guide/en/logstash-versioned-plugins/current/filter-elasticsearch-index.html


(yaser no) #5

thank you .


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.