Logstash - Elastic App Search Error

Elastic Stack Logstash
1

Running logstash with the elastic_app_search output throws an error

My config file looks like this:

    input {
      jdbc {
    jdbc_connection_string => "jdbc:sqlserver://XXXXX:1433;databaseName=XXXX;user=XXXX;password=XXXXX"
    jdbc_driver_class => "com.microsoft.sqlserver.jdbc.SQLServerDriver"
    jdbc_user => "XXXX"
    statement => "SELECT * FROM XXX"
      }
    }

    output { 
      elastic_app_search {
    engine => "12"
    host => "https://XXXXX.ent-search.eu-west-2.aws.cloud.es.io"
    api_key => "private-XXXXXX"
      }
    }

However when running i get the following in the output:

    [2020-10-13T17:19:58,118][INFO ][logstash.runner          ] Starting Logstash {"logstash.version"=>"7.9.2", "jruby.version"=>"jruby 9.2.13.0 (2.5.7) 2020-08-03 9a89c94bcc Java HotSpot(TM) Client VM 25.261-b12 on 1.8.0_261-b12 +indy +jit [mswin32-i386]"}
    [2020-10-13T17:19:58,398][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
    [2020-10-13T17:19:59,853][INFO ][org.reflections.Reflections] Reflections took 62 ms to scan 1 urls, producing 22 keys and 45 values 
    [2020-10-13T17:20:03,969][ERROR][logstash.agent           ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
    [2020-10-13T17:20:04,786][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=>9600}
    [2020-10-13T17:20:09,490][INFO ][logstash.runner          ] Logstash shut down.
    [2020-10-13T17:20:09,516][ERROR][org.logstash.Logstash    ] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit
2

Enable log.level debug and see if you get a more informative error message.

3

Additional Error from DEBUG
Looks like it's trying to connect to XXXXX.ent-search.eu-west-2.aws.cloud.es.io.api.swiftype.com instead of XXXXX.ent-search.eu-west-2.aws.cloud.es.io

[2020-10-13T17:47:33,188][DEBUG][logstash.javapipeline    ] Starting pipeline {:pipeline_id=>"main"}
[2020-10-13T17:47:34,507][DEBUG][logstash.javapipeline    ][main] Pipeline terminated by worker error {:pipeline_id=>"main", :exception=>#<LogStash::ConfigurationError: Failed to connect to App Search. hostname "XXXXX.ent-search.eu-west-2.aws.cloud.es.io.api.swiftype.com" does not match the server certificate>, :backtrace=>["C:/logstash-7.9.2/vendor/bundle/jruby/2.5.0/gems/logstash-output-elastic_app_search-1.1.1/lib/logstash/outputs/elastic_app_search.rb:36:in `register'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:126:in `register'", "org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:68:in `register'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:226:in `block in register_plugins'", "org/jruby/RubyArray.java:1809:in `each'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:225:in `register_plugins'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:559:in `maybe_setup_out_plugins'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:238:in `start_workers'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:183:in `run'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:134:in `block in start'"], "pipeline.sources"=>["C:/logstash-7.9.2/config/sql.conf"], :thread=>"#<Thread:0xee4f2e run>"}
[2020-10-13T17:47:34,537][ERROR][logstash.agent           ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.