Inconsistency: input elasticsearch does not require "cluster" but output elastic search requires it


(discuss03) #1

There seems to be a inconsistency between the input and output versions for logstash elasticsearch.

Input elastic search does not understand the parameter "host" even though it is documented on the website. Input elasticsearch does not require to specify the "cluster" parameter to read events even though it is not the default one.

Output elasticsearch requires the "cluster" parameter when writing to elasticsearch.

Any ideas if these are bugs, or is this how it is designed to be? It would also be nice if the documentation went a bit further with cases...

Is there a place that shows samples of other peoples logstash configurations - like:

Read from Elasticsearch
Filter using GROK
Write to Elasticsearch


(Mark Walkom) #2

What version are you using?


(discuss03) #3

The latest


(Magnus B├Ąck) #4

The latest

Please be explicit. We can't know which version you think is the latest.

The Logstash 1.5.0 documentation does talk about a host parameter in the examples but the actual (and documented) parameter name is hosts. This is a documentation bug that's fixed here:


(system) #5