Logstash - Elastisearch template

Elastic Stack Logstash
1

Hi, I'm working with twitter and want to map coordinates for the reconnoitre Kibana . This is my template.json

{
 "template": "twitter",
 "order":    1,
"settings": {
 "number_of_shards": 1
},
"mappings": {
"tweet": {
  "_all": {
    "enabled": false
  },
  "dynamic_templates" : [ {
     "message_field" : {
       "match" : "message",
       "match_mapping_type" : "string",
       "mapping" : {
         "type" : "string", "index" : "analyzed", "omit_norms" : true
       }
     }
   }, {
     "string_fields" : {
       "match" : "*",
       "match_mapping_type" : "string",
       "mapping" : {
         "type" : "string", "index" : "analyzed", "omit_norms" : true,
           "fields" : {
             "raw" : {"type": "string", "index" : "not_analyzed", "ignore_above" :  256}
           }
       }
     }
   } ],
  "properties": {
    "text": {
      "type": "string"
    },
      "coordinates": {
      "properties": {
         "coordinates": {
            "type": "geo_point"
         },
         "type": {
            "type": "string"
         }
      }
    }
     }
   }
 }
}

This is my logstash.conf file

input {
    twitter {
      consumer_key => "l5KGrXvRywF3QMxhD0ab4slIA"
      consumer_secret => "qYoz4ooYM2O5ir9W9ECSsZfO7oLE8tHZvX1wlq9pH2KwHUjziC"
        oauth_token => "738404980470730752-lrULPA0EEPZHlMDOyDNVoSFdfvykyKJ"
      oauth_token_secret => "ydtfWx6QZ5a5CTG1R2rA7wCTcBwBVElvOfdVP9Uxo3JE3"
       keywords => [ "tecnologia" ]
     full_tweet => true
  ignore_retweets => true
}
 }

filter {
}

 output {
   stdout { codec => rubydebug }
elasticsearch {
hosts => ["localhost:9200"]
index => "twitter4"
document_type => "tweet"
template => "twitter_template.json"
template_name => "twitter"
user => "twitter"

  }
}

This is the error,
does not take twitter_template.jason

2

Error

Required argument 'body' missing {:class=>"ArgumentError", :level=>:error}

3

The template pattern

"template": "twitter",

doesn't match the name of your index:

index => "twitter4"

But I don't think that's related to your error. Aren't there any more messages in the log? The first thing I'd try is making the path to the template JSON in the template option an absolute path.

4

The path to template.json equals of logstash.conf

etc/logstash/conf.d/logstash.conf

etc/logstash/conf.d/template.json

5

What makes you assume that Logstash reads template files relative to /etc/logstash/conf.d? Which version of the elasticsearch output plugin do you have?