How to express SQL in Logstash

Hello Team

I am using Logstash and Elasticsearch version 7.8.0.

I want to write query in logstash for input plugin of elasticsearch as

select userId from myindex

I am unable to achieve same in logstash ...

Hi,

I don't think this is possible as the elasticsearch input takes the query as an ElasticSearch DSL document.

However, there are a few possibilities that you could try:

  1. If you have a platinum or enterprise license you are allowed to use the ElasticSearch JDBC agent. in this case, you could use the jdbc-input plugin to do the query.
  2. The second option is the Elasticsearch SQL API. You could utilize this API using the http_poller plugin.

Best regards
Wolfram

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.