Hi
Below is my Logstash (7.2.0) conf file:
input { http_poller { urls => { snowsr => { url => "https://now.com/api/now/table/u_service_request?sysparm_display_value=true&sysparm_exclude_reference_link=true" #url => "https://now.com/api/now/table/u_service_request?sysparm_query=sys_updated_onONLast%2045%20minutes@javascript:gs.beginningOfLast45Minutes()@javascript:gs.endOfLast45Minutes()&sysparm_display_value=true&sysparm_exclude_reference_link=true" user => "user" password => "C23eeer" headers => {Accept => "application/json"} } } request_timeout => 60 metadata_target => "http_poller_metadata" schedule => { cron => " * * * * * UTC"} #codec => "json" } } filter { json { source => "result" } split { field => ["result"] } date { match => ["[result][sys_created_on]","yyyy-MM-dd HH:mm:ss"] target => "sys_created_on" } date { match => ["[result][sys_updated_on]","yyyy-MM-dd HH:mm:ss"] target => "sys_updated_on" } date { match => ["[result][opened_at]","yyyy-MM-dd HH:mm:ss"] target => "opened_at" } date { match => ["[result][closed_at]","yyyy-MM-dd HH:mm:ss"] target => "closed_at" } date { match => ["[result][u_resolved_at]","yyyy-MM-dd HH:mm:ss"] target => "resolved_at" } } output { elasticsearch { hosts => ["10.19.85.209:9200"] index => "srequestsnow" action=>update document_id => "%{[result][number]}" doc_as_upsert =>true } stdout { codec => rubydebug } }
Below is my Error log:
> [2020-01-13T00:56:46,722][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:snowsr, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of #, {, } at line 7, column 5 (byte 468) after input {\n http_poller {\n urls => {\n snowsr => {\n url => \"https://lsk12dev.service-now.com/api/now/table/u_service_request?sysparm_display_value=true&sysparm_exclude_reference_link=true\"\n #url => \"https://lsk12dev.service-now.com/api/now/table/u_service_request?sysparm_query=sys_updated_onONLast%2045%20minutes@javascript:gs.beginningOfLast45Minutes()@javascript:gs.endOfLast45Minutes()&sysparm_display_value=true&sysparm_exclude_reference_link=true\"\n ", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in
compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:in compile_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in
block in compile_sources'", "org/jruby/RubyArray.java:2577:in map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in
compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in
initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:24:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in
execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:in block in converge_state'"]}
Help me with where im missing.
Thanks.
Regards,
Katara