How do you break up long lines in logstash.conf? [answered]

Elastic Stack Logstash
1

I'm trying to use logstash to pull some data from a REST endpoint. Some of the GET queries will have lines that are quite long. I'd like to break up really long lines like in this example...

input {
    http_poller {
        someRestEndpoint  => {
            method => get
                url => "http://somehost/blah?blah&blah&blah&reallyLongURLThatGoesOnForThreeHundredCharactersOrMore"
        }
    }
}

Would anyone care to give me an example of how long config lines like this can be broken up in the logstash.conf?

I've tried consecutive strings:

"first half of the really long line"
"second half of the really long line"

but logstash didn't like that. Nor did it like trying to concatenate with a '+':

"first half of the really long line"  +
"second half of the really long line"

Out of desperation, I've even tried

"first half of the really long line"     \
"second half of the really long line"

and

"first half of the really long line"   +    \
"second half of the really long line"

no joy.

I'm hoping one or more of the more seasoned logstash users (or Elastic folks) could either suggest an approach that involves embedding ruby in my config OR some other approach I haven't thought of yet.

In response to the probably "why would you want to do that??":
I'd like to keep my configs as readable as possible, and easily maintainable.

Thanks!

-KwM-

2

I don't think there's a way to break up string literals in the Logstash configuration DSL.

3

Thanks, Magnus.

Yeah, I suspected as such. I was hoping that there might be a way to drop down to ruby...

ruby{ some code to muck about with the literal value }

I haven't been able to come up with anything yet, though. I'm beginning to suspect I much just have to live with long lines. Is so, maybe I'll put in an enhancement request.

4

I ultimately found that I was able to break up long lines within the literal itself.

This worked just fine for me.

input {
    exec {
        command  => "http_proxy='http://proxy.someplace.com:8080'  \
                     https_proxy='http://proxy.someplace.com:8080' \
                    /opt/sandbox/kwm/projects/itilIntegrationMonitoring/sideDoor  \
                    incident    \
                   'sys_created_onRELATIVEGE@minute@ago@30^sys_created_by=monitoring.integration' "
        interval => 300
        codec    => "plain"
    }
}