Hello,
Currently, we are updating our data in Elasticsearch by uploading a lot of data once in a while from a firebird database which uses quite some data. We want this this to be synchronized by uploading only new and edited records from this database, for example once every 10 minutes. For this we would like to use Logstash and JDBC. I am fairly new to Elasticsearch and especially new to Logstash, so I need some help.
From https://www.elastic.co/blog/how-to-keep-elasticsearch-synchronized-with-a-relational-database-using-logstash, we came up with this:
input {
jdbc {
jdbc_driver_library => "c:/bug/jaybird-full-3.0.6.jar"
jdbc_driver_class => "org.firebirdsql.jdbc.FBDriver"
jdbc_connection_string => "jdbc:firebirdsql://path"
jdbc_user => <my username>
jdbc_password => <my password>
jdbc_paging_enabled => false
jdbc_page_size => "50000"
jdbc_fetch_size => 50000
tracking_column => "SERNR"
use_column_value => true
tracking_column_type => "numeric"
schedule => "*/5 * * * * *"
statement => "SELECT * FROM YIELD WHERE SERNR > 1418300" #1418300 should be SERNR from previous instance
}
}
filter {
mutate {
copy => { "SERNR" => "[@metadata][_id]"}
remove_field => ["@version"]
}
}
output {
elasticsearch {
hosts => <host>
user => <my username>
password => <my password>
index => <my index>
document_id => "%{[@metadata][_id]}"
}
}
"my index" should contain all the records that were uploaded after the previous tracking_column and the records that already existed. SERNR is in this case the specific id belonging to the record. I would like to assign SERNR to document_id which did not work during my multiple attempts. Next to that, I want to add some inner joins. I tried to include this by inserting it like this:
statement => "SELECT * FROM OPBRNGST INNER JOIN KOPER ON OPBRNGST.KOPER = KOPER.KOPER_NR INNER JOIN PRODUKT ON OPBRNGST.PRODUKT = PRODUKT.PROD_NR WHERE VOLGNR > 1418300 ORDER BY VOLGNR ASC"
This resulted in errors. Could you please help me with configuring Logstash to upload new records? Or do you know some examples and documentation?
Thanks!