Input PDF in logstash

[Vivek_Srivastava]

Unable to input PDF in logstash.

[2020-02-03T23:38:35,068][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#<LogStash::Error: Don't know how to handle Java::JavaLang::IllegalStateException for PipelineAction::Create<main>>, :backtrace=>["org/logstash/execution/ConvergeResultExt.java:109:in create'", "org/logstash/execution/ConvergeResultExt.java:37:in add'", "C:/Users/Desktop/ELK/elknew/lop/logstash-7.5.2/logstash-core/lib/logstash/agent.rb:339:in `block in converge_state'"]}
[2020-02-03T23:38:35,189][ERROR][org.logstash.Logstash ] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

Any idea how to fix it?

[kares (Karol Bucek)]

Hello Vive, its unclear what you're asking about.
LS does not have a pdf input. Is your error reproducible?
Sounds like you might have some issue in your pipeline configuration.

[ropc (Romain Chanu)]

@Vivek_Srivastava - Welcome to our community forums!

In addition to what @kares mentioned, can you also provide the following information:

• your pipeline config file.
• Logstash debug logs. For example, you can run the following command:
  • bin/logstash --debug -f PATH_TO_CONFIG_FILE

Thank you.

[Vivek_Srivastava]

This is my conf file:

input {
file {
type => "java"
path => "C:/Users/vivekkumar14/Desktop/ELK/elknew/logstashFiles/Myfile5.pdf"
#start_position => "beginning"
sincedb_path => "C:/Users/vivekkumar14/Desktop/ELK/elknew/logstashFiles/Database7/sincedb-access"
stat_interval => 1

codec => multiline {
  pattern => "^\s"
  #negate => "true"
  what => "previous"
}

}
}

filter {
grok {
match => { "message" => "%{IP:client}%{SPACE}%{WORD:method}%{SPACE}%{URIPATHPARAM:request} %{NUMBER:bytes} %{NUMBER:duration}" }
}
grok {
match => { "message" => "%{URIPATHPARAM:request} %{NUMBER:bytes} %{NUMBER:duration}" }
}
grok {
match => { "message" => "%{WORD:display} %{NUMBER:ratio} %{NUMBER:seconds}" }
}
}

output {

Sending properly parsed log events to elasticsearch

stdout {
codec => rubydebug
}

elasticsearch {
hosts => ["localhost:9200"]
manage_template => true
index => "filterexample12"
}

}

[Vivek_Srivastava]

I am asking how to input pdf file in logstash. Is there any option to input pdf file in logstash??.

[Christian_Dahlqvist]

No, I do not think so. I would recommend you look at FS crawler instead.